Static task
static1
Behavioral task
behavioral1
Sample
d296004004e210e6b1fb8c28720ef592c06b898fe122d2096b2e7c56e67c5c80.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d296004004e210e6b1fb8c28720ef592c06b898fe122d2096b2e7c56e67c5c80.exe
Resource
win10v2004-20220901-en
General
-
Target
d296004004e210e6b1fb8c28720ef592c06b898fe122d2096b2e7c56e67c5c80
-
Size
374KB
-
MD5
0b0623901d9f8e57daa8ce617b0443f0
-
SHA1
0a9818c226bed4af860272b06d7395e1ca9ab493
-
SHA256
d296004004e210e6b1fb8c28720ef592c06b898fe122d2096b2e7c56e67c5c80
-
SHA512
813d53202f840cebd8c687bea0dac665d313d75f06c79bf9d476ffcaacdbb6184959e23720cdb3c3540889c7e06a9d39a6332650a076e3a29340aa0cb18a3fd8
-
SSDEEP
6144:6YEoo/4rnzsBw+EwKEnePrNqhdFvmNpqB/A8/QJQCe2zdRQ0yhmcvZpIwm:6uHrcYPkePhqpvmaBvYJQCe2I9fs
Malware Config
Signatures
Files
-
d296004004e210e6b1fb8c28720ef592c06b898fe122d2096b2e7c56e67c5c80.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 361KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE