Static task
static1
Behavioral task
behavioral1
Sample
df749de233608e048b5a743f315c214f9992d72c3954566677de3b7b87396212.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
df749de233608e048b5a743f315c214f9992d72c3954566677de3b7b87396212.exe
Resource
win10v2004-20221111-en
General
-
Target
df749de233608e048b5a743f315c214f9992d72c3954566677de3b7b87396212
-
Size
1001KB
-
MD5
efd93eb6a61b47110501397180976547
-
SHA1
9a2cf4597c5cdc96e4675007f1a68651301a4688
-
SHA256
df749de233608e048b5a743f315c214f9992d72c3954566677de3b7b87396212
-
SHA512
b4f74f78d1c14dd9fb10eb4ac2a157f0297ed7b3cef17bd162d17273b682fac05cee747c6852d43617730ad122d8d6c55355919aa42747faf818bf6d04f7742a
-
SSDEEP
24576:4FJwbmGAuvcQntFAf9VOJg9VaeW6RIrTT4YTuuuuuuuuuuuuuuuuuuuuuuuuuuuo:Zpl1yV3wYR6ZTuuuuuuuuuuuuuuuuuuj
Malware Config
Signatures
Files
-
df749de233608e048b5a743f315c214f9992d72c3954566677de3b7b87396212.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 180KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
slkjhodc Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zyyaujcp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE