Static task
static1
Behavioral task
behavioral1
Sample
a32b44463989f5ef5409fbb91d01122a7c78bc76108b0ec0e6eb73756a3185f1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a32b44463989f5ef5409fbb91d01122a7c78bc76108b0ec0e6eb73756a3185f1.exe
Resource
win10v2004-20221111-en
General
-
Target
a32b44463989f5ef5409fbb91d01122a7c78bc76108b0ec0e6eb73756a3185f1
-
Size
1.4MB
-
MD5
bb3fe3e616d030f3b3d9067017ec8cae
-
SHA1
c672eb52f0857c2a17cb07f7b53c8f89197f5a00
-
SHA256
a32b44463989f5ef5409fbb91d01122a7c78bc76108b0ec0e6eb73756a3185f1
-
SHA512
81fcd7eb27c55c7b637a4273ec3355f42ce611cee8ab09b22ed2d23b22bd54324a1a991a756cf9c252ee1881e067e256303065ae84c4e5d6728e3bdfcdbce79e
-
SSDEEP
24576:THqCs0DhwQ/mTL+ZTnDhgsMlibStOHa4190OfhNqVPeCNPU16lAOmF55BtMK:TKghwUmTyJ0tOXIaNqAC21wY59
Malware Config
Signatures
Files
-
a32b44463989f5ef5409fbb91d01122a7c78bc76108b0ec0e6eb73756a3185f1.exe windows x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
.pelock Size: 407KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 992KB - Virtual size: 14.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE