Static task
static1
Behavioral task
behavioral1
Sample
d33365368e824f62a050d0315940a9d512f31d91deb525fbf34d71e4e7806abb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d33365368e824f62a050d0315940a9d512f31d91deb525fbf34d71e4e7806abb.exe
Resource
win10v2004-20220901-en
General
-
Target
d33365368e824f62a050d0315940a9d512f31d91deb525fbf34d71e4e7806abb
-
Size
1.3MB
-
MD5
0bf2f445d5d8e89f787003d9da7ac858
-
SHA1
f0303c992870ca9f6d43c098a5c3b45789d4a016
-
SHA256
d33365368e824f62a050d0315940a9d512f31d91deb525fbf34d71e4e7806abb
-
SHA512
0db4e086f5ba716c957092d3089268b155cb9949bbf2c39fafd2458fdad1fb7e2e7ebc5902589304a7cac6e547302f31649f49b969db60d601acf0dfa837f641
-
SSDEEP
24576:xrY9uiXCZEmH+AoNRx0Dz3QEZ3Ipm8BvQ+F+NWDpYtxrRLdPtNO:jiXC6mHRHQuO1InWDGtxrRJtk
Malware Config
Signatures
Files
-
d33365368e824f62a050d0315940a9d512f31d91deb525fbf34d71e4e7806abb.exe windows x86
35a9e9974c673669c35cafffdf20e1bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
Sections
Size: 667KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bebfhetn Size: 624KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fpdnktgr Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE