Static task
static1
Behavioral task
behavioral1
Sample
d2a6c09182a7e3fe29fe77ca64112893399ff4ce2f306236836b301b00deda69.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d2a6c09182a7e3fe29fe77ca64112893399ff4ce2f306236836b301b00deda69.exe
Resource
win10v2004-20220812-en
General
-
Target
d2a6c09182a7e3fe29fe77ca64112893399ff4ce2f306236836b301b00deda69
-
Size
347KB
-
MD5
265c89c254276a9d7ed210e5e8c30640
-
SHA1
b5fcca8280f99b9a58b6ef85d07606a3c08ed7d0
-
SHA256
d2a6c09182a7e3fe29fe77ca64112893399ff4ce2f306236836b301b00deda69
-
SHA512
0b506a5696a48f4f4a1d971b31ee79ccdbb8d43181e21e3e655ab201eb519fdb5b9cd2bf7c7329761de01b0214c580717fd2f01fe5974fe70ee8da967a616f59
-
SSDEEP
6144:oQOowGGWQs5Dbdq2THgfuh4/eUCcWE3l24Bnig16hCSy6CmKGEGDMgcb+SVHIT0:SozGjs5Dxq2THg8cW+24BniRCSyT43cn
Malware Config
Signatures
Files
-
d2a6c09182a7e3fe29fe77ca64112893399ff4ce2f306236836b301b00deda69.exe windows x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
CODE Size: 319KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 3KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ