Static task
static1
Behavioral task
behavioral1
Sample
afa8618b63d8cdef67e16636ce7cdb9107da8c8b875757737b6b998834cbf04b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
afa8618b63d8cdef67e16636ce7cdb9107da8c8b875757737b6b998834cbf04b.exe
Resource
win10v2004-20221111-en
General
-
Target
afa8618b63d8cdef67e16636ce7cdb9107da8c8b875757737b6b998834cbf04b
-
Size
87KB
-
MD5
453125a3400d362e92824b18200ddba1
-
SHA1
b882fbf9b3a1d996f39bd256b3115306957d2e92
-
SHA256
afa8618b63d8cdef67e16636ce7cdb9107da8c8b875757737b6b998834cbf04b
-
SHA512
a27c31dabcbb4de7c28ebdd24aff3842730b24cc82403ee432ba0b8e580aca84aa70a2a06d3d752573d7b89eb02ede4bd241421c9f9de03740147119b23eecbb
-
SSDEEP
384:oEz0e11F1YHgx4x0EgDEoGlZWcLF+5Ul3UHnHd+:oSF4RxuDEzZLCUGHd
Malware Config
Signatures
Files
-
afa8618b63d8cdef67e16636ce7cdb9107da8c8b875757737b6b998834cbf04b.exe windows x86
d1de9cb05364462a2d510f7f8254cac2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpegsys
ord46
ord32
ord38
ord40
ord39
ord41
ord31
kernel32
ord364
ord305
ord813
ord638
ord710
ord553
ord419
ord329
ord476
ord513
ord385
ord160
ord822
ord248
ord765
ord346
ord657
ord784
ord395
ord304
ord362
ord719
ord185
ord811
ord318
ord312
ord406
ord722
ord377
ord443
ord441
ord512
ord511
ord795
ord509
ord793
ord736
ord296
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 462B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 61KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE