Static task
static1
Behavioral task
behavioral1
Sample
b434490eb1be83f066673eba81f42289392d83fe3e6b247812517e02c0d8ae0b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b434490eb1be83f066673eba81f42289392d83fe3e6b247812517e02c0d8ae0b.exe
Resource
win10v2004-20221111-en
General
-
Target
b434490eb1be83f066673eba81f42289392d83fe3e6b247812517e02c0d8ae0b
-
Size
528KB
-
MD5
57213c4d4be5728a70a9ff504506d9a6
-
SHA1
7f5c5dc2bdbf2f4360a9405112d6c6868e919ad6
-
SHA256
b434490eb1be83f066673eba81f42289392d83fe3e6b247812517e02c0d8ae0b
-
SHA512
4318249e86b0038259948c7edb6cdd22ac26c0c0caa7ac84dc350c686b54ec5454974657bf8912d5d920086e4450bad687aed1af41a98f592bc9f4601bf7ec0e
-
SSDEEP
6144:odZTHVra6fzkjGToa5cb9Dd8c/1NXTSFsaR1A90/aS6oD+ay9Ealx:I5aOxTg9Di+2L1AOaSSayCA
Malware Config
Signatures
Files
-
b434490eb1be83f066673eba81f42289392d83fe3e6b247812517e02c0d8ae0b.exe windows x86
07aa02a6efc4c8d887252150dea78fbe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
lstrcatW
GetWindowsDirectoryW
CreateFileW
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
ExitProcess
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 783B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 417B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 94B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ