Static task
static1
Behavioral task
behavioral1
Sample
4364d7b0f66691c07c39520e618d85fc34ddd4201665d6e816ea219416b6f6ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4364d7b0f66691c07c39520e618d85fc34ddd4201665d6e816ea219416b6f6ed.exe
Resource
win10v2004-20220901-en
General
-
Target
4364d7b0f66691c07c39520e618d85fc34ddd4201665d6e816ea219416b6f6ed
-
Size
1.3MB
-
MD5
6eb4cab1f8c662e8bf5cb5287849c2d1
-
SHA1
e7992b506227879645fc91c1694fb465a8e6bf55
-
SHA256
4364d7b0f66691c07c39520e618d85fc34ddd4201665d6e816ea219416b6f6ed
-
SHA512
c4aac7d80e1b6f29067d32944b985c2c5c1ecebb125d13b2c3e61a9a0ecfbec3a414d0c6719ae9f1d73fe8b6fdd6224f3b3c53358d12149a3af8db06933d4181
-
SSDEEP
24576:H6keeZ0ul2SbasyzqB/8eT4wUB+lVSgln6R3nbNAHfHTr/A4X84BtY1Qli7rAIuq:HZdwSOsyzqBL1UMnl6R3+33d07rh
Malware Config
Signatures
Files
-
4364d7b0f66691c07c39520e618d85fc34ddd4201665d6e816ea219416b6f6ed.exe windows x86
3ce8605f4572d09027ece14b34fde472
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
Sections
Size: 667KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xhuatrcn Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
etovajfd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE