Static task
static1
Behavioral task
behavioral1
Sample
154c9f003323b916de6fcfba640b0a3be713fe618bd4f2c41ccf583d3d50e75b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
154c9f003323b916de6fcfba640b0a3be713fe618bd4f2c41ccf583d3d50e75b.exe
Resource
win10v2004-20221111-en
General
-
Target
154c9f003323b916de6fcfba640b0a3be713fe618bd4f2c41ccf583d3d50e75b
-
Size
680KB
-
MD5
13bc318c3bd53db736bcdf6cb067dbe0
-
SHA1
9be9effc16ea68729ccd6521bf42b9bbe45b3e48
-
SHA256
154c9f003323b916de6fcfba640b0a3be713fe618bd4f2c41ccf583d3d50e75b
-
SHA512
da23dbe321ef22ba5b675366d6af3534809b5a1262ba19ebbc700c2dd7de889392f1aff95d8167da51d1fcbbb5fc47f8ad5b4e32d202e33e4d12e32da87c75a7
-
SSDEEP
12288:qLBo6m3/Uk+0u0d19UYGXz65GDzixfpNE/FcGcwzZqzdu0DDQtvUK:8qJ/Uk+/419UXOaXODiqxunl
Malware Config
Signatures
Files
-
154c9f003323b916de6fcfba640b0a3be713fe618bd4f2c41ccf583d3d50e75b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 162KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uptojrx Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oikngqq Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
moxqpbo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE