Static task
static1
Behavioral task
behavioral1
Sample
bed9db2d42d217f24f449a697aebdc42747aed01ff04121bbabd77ba0012d664.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bed9db2d42d217f24f449a697aebdc42747aed01ff04121bbabd77ba0012d664.exe
Resource
win10v2004-20221111-en
General
-
Target
bed9db2d42d217f24f449a697aebdc42747aed01ff04121bbabd77ba0012d664
-
Size
42KB
-
MD5
3d80ffd4ca2a1a95ebcb476d0d66b97e
-
SHA1
7d44a5a8ea6a4d3be7215a9ad9e2116f811f109d
-
SHA256
bed9db2d42d217f24f449a697aebdc42747aed01ff04121bbabd77ba0012d664
-
SHA512
a454703a25d286f120b28f574fe18ed42eca77a3dbfc3658d43a215f255f2e1d2d811d116cd20dc316bf27527122cbcaf273e17cc0dcb4cf8fed8f3ca9bd8601
-
SSDEEP
768:VQR+lgVBiveKOhIDDuP7TudzyLm3RkDwr1/jGQDw:VQR+lg/ivE/7a9DDrw
Malware Config
Signatures
Files
-
bed9db2d42d217f24f449a697aebdc42747aed01ff04121bbabd77ba0012d664.exe windows x86
f95d70f9099285784110e42c04c96cb3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree
Sections
.text Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE