Static task
static1
Behavioral task
behavioral1
Sample
afc80c6f2435d269162cc9559f1fdfb0cc2e1169ab4b0157dd769c29a801258b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afc80c6f2435d269162cc9559f1fdfb0cc2e1169ab4b0157dd769c29a801258b.exe
Resource
win10v2004-20221111-en
General
-
Target
afc80c6f2435d269162cc9559f1fdfb0cc2e1169ab4b0157dd769c29a801258b
-
Size
97KB
-
MD5
e9a7a31bf8cbb3ab3d7793493bef99d2
-
SHA1
1c46d10282eb0853b91b95d371a0ba8de3038641
-
SHA256
afc80c6f2435d269162cc9559f1fdfb0cc2e1169ab4b0157dd769c29a801258b
-
SHA512
5cff4b386d71033eab98b541f2c327565f2c0bec63e64de539e280b18f364e50b476017e8b59753c5a65fff336f5084d4743d6c2646d92ad7021165409357951
-
SSDEEP
3072:9Oe4BMA44iHbR7sheqHW8hv/tcVis69yPGWGeH:9OxG4i7+hearv/tmip0FG
Malware Config
Signatures
Files
-
afc80c6f2435d269162cc9559f1fdfb0cc2e1169ab4b0157dd769c29a801258b.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 87KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE