Static task
static1
Behavioral task
behavioral1
Sample
b511cdf70e928060d793c9340ea3f6e64ab92daa7912ac7460c6a6f88d2319bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b511cdf70e928060d793c9340ea3f6e64ab92daa7912ac7460c6a6f88d2319bb.exe
Resource
win10v2004-20221111-en
General
-
Target
b511cdf70e928060d793c9340ea3f6e64ab92daa7912ac7460c6a6f88d2319bb
-
Size
115KB
-
MD5
ca52386e894be92d388f300c54cac106
-
SHA1
9ec98e7ac05f7f189e0e91e3d2cf6f09fe094025
-
SHA256
b511cdf70e928060d793c9340ea3f6e64ab92daa7912ac7460c6a6f88d2319bb
-
SHA512
fd717ee2e0fe27b821c4af432e62b9ab90af0caad93709a61389716f44bcaf43d9352f5cdf22d3f52c39aed7b53ba69f2c89e30867ed1862e2885c0a6fe09a1e
-
SSDEEP
3072:B4gQl/M//dqfu20+ZAHBP76EDKE3sWktU:BYl/GwfD0THBP7RDKRbt
Malware Config
Signatures
Files
-
b511cdf70e928060d793c9340ea3f6e64ab92daa7912ac7460c6a6f88d2319bb.exe windows x86
fe5ac3991a2c39928c1304a9846be869
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleA
VirtualFree
Sleep
ExitProcess
user32
CharNextA
Sections
.text Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ergerg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ