Static task
static1
Behavioral task
behavioral1
Sample
620ed7b2baac16db74027e5eade8e41d06dec5488b29136b172c2bee048e8540.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
620ed7b2baac16db74027e5eade8e41d06dec5488b29136b172c2bee048e8540.exe
Resource
win10v2004-20220812-en
General
-
Target
620ed7b2baac16db74027e5eade8e41d06dec5488b29136b172c2bee048e8540
-
Size
13KB
-
MD5
f613278f3adac95246516d01395fdae5
-
SHA1
c1a08631b10408f7791ab8de82c30fabcd6c8994
-
SHA256
620ed7b2baac16db74027e5eade8e41d06dec5488b29136b172c2bee048e8540
-
SHA512
cf00f2d1510521b784745c1762102c841a5077acbc161dff7870fba93a5afdab70eab0143f67b03ae0e5ac5bdbd75b4c9e171d31d97cb57761bb9589b4e73c36
-
SSDEEP
384:ylgn1I4uPAr6KB2AJYg/MC70pjWXDc5Lfwj:ogni4SSJ1ECopjeQdo
Malware Config
Signatures
Files
-
620ed7b2baac16db74027e5eade8e41d06dec5488b29136b172c2bee048e8540.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE