Static task
static1
Behavioral task
behavioral1
Sample
853fbba2b5d3e5951cb2feec808d56d45491158811d3b99d66dc122dbe868d08.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
853fbba2b5d3e5951cb2feec808d56d45491158811d3b99d66dc122dbe868d08.exe
Resource
win10v2004-20221111-en
General
-
Target
853fbba2b5d3e5951cb2feec808d56d45491158811d3b99d66dc122dbe868d08
-
Size
78KB
-
MD5
9e0c61e14e44f9b93a38209d7631269f
-
SHA1
a9affa697072dcd93c6d8e344e72a2e01350da1f
-
SHA256
853fbba2b5d3e5951cb2feec808d56d45491158811d3b99d66dc122dbe868d08
-
SHA512
a5fa907ba897f0801ed72c4fb156e9bbedfbe979ba1ed58b9937d1658a842e6b80e41fa39b1e5239ea2a9260ddd6d9f965abb10ae56c611b457c89843370e407
-
SSDEEP
1536:+zVM5fMOs2Mj736upCQDY7iQVYNsnQEP6b2AiR5i+WVMoIkxVZHwpFFvB4JJYdc:+zVM5fMOs2MjTIQDCiYnQEP6bK5i+WK6
Malware Config
Signatures
Files
-
853fbba2b5d3e5951cb2feec808d56d45491158811d3b99d66dc122dbe868d08.exe windows x86
e1ddd7907d6040e43e49e090988f451d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtCreateFile
RtlNtStatusToDosError
crypt32
RegQueryValueExU
kernel32
HeapAlloc
VirtualAlloc
FreeConsole
activeds
FreeADsMem
Sections
.textbss Size: - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ