Static task
static1
Behavioral task
behavioral1
Sample
979547be845693133467bc3c742d2e22ad8175993c3745ca578ed9791eed3f9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
979547be845693133467bc3c742d2e22ad8175993c3745ca578ed9791eed3f9c.exe
Resource
win10v2004-20220812-en
General
-
Target
979547be845693133467bc3c742d2e22ad8175993c3745ca578ed9791eed3f9c
-
Size
44KB
-
MD5
b2ea79450e8349b45846651165d9ae98
-
SHA1
f67df9276557e34d002b16d717198516b1f26eca
-
SHA256
979547be845693133467bc3c742d2e22ad8175993c3745ca578ed9791eed3f9c
-
SHA512
6b0f45691bc2487905f6a21ac6fd75b95b7106f9772cb9093d9a0fc88ca62bc7766ddaa673e4d995663dfb379272de4bb9a697c3f88e8326f88bc64488c6ab62
-
SSDEEP
768:RE1qaFKhI7PlzBB+dQ4/LuF1BpNEIHgpvfBTtlFszFxBuzDGHfaI+lZlZz71gRnC:edNz7+XA/DETjIYnCfaI+DlWC
Malware Config
Signatures
Files
-
979547be845693133467bc3c742d2e22ad8175993c3745ca578ed9791eed3f9c.exe windows x86
12f5522349097124440ee71bb2af34ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
Sections
.data Size: 40KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 3KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 699B - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE