Static task
static1
Behavioral task
behavioral1
Sample
dfab2699b4c69a92ea3252c11b450e493c0f75eaed7dd311cfdbbbe591378d26.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfab2699b4c69a92ea3252c11b450e493c0f75eaed7dd311cfdbbbe591378d26.exe
Resource
win10v2004-20220901-en
General
-
Target
dfab2699b4c69a92ea3252c11b450e493c0f75eaed7dd311cfdbbbe591378d26
-
Size
375KB
-
MD5
04505980a7da8b63bcd008668e6ca0b0
-
SHA1
a6fdc648918e3e522bb932a32e70e815a8fd485d
-
SHA256
dfab2699b4c69a92ea3252c11b450e493c0f75eaed7dd311cfdbbbe591378d26
-
SHA512
14853f59f1a6d37cbcc1d1ef273fe518eede86aee66f480208d87de15fb30139e9fce5f1455ea4314952d7bfc97b9adc2f3f635864d164c195caaf6abc172319
-
SSDEEP
6144:6YEoo/4rnzsBw+EwKEnePrNqhdFvmNpqB/A8/QJQCe2zdRQ0yhmcvZpIwZ:6uHrcYPkePhqpvmaBvYJQCe2I9fv
Malware Config
Signatures
Files
-
dfab2699b4c69a92ea3252c11b450e493c0f75eaed7dd311cfdbbbe591378d26.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 361KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE