Static task
static1
Behavioral task
behavioral1
Sample
bed37966a0fba606de49f58a5af9c7b6a5aec32b44eee17656e6bc88dcffa3dc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bed37966a0fba606de49f58a5af9c7b6a5aec32b44eee17656e6bc88dcffa3dc.exe
Resource
win10v2004-20220812-en
General
-
Target
bed37966a0fba606de49f58a5af9c7b6a5aec32b44eee17656e6bc88dcffa3dc
-
Size
183KB
-
MD5
1d965a36db30d9a38a7934ee27776310
-
SHA1
220b53d78094560f9b0e6aa4df605d874dd4ad9a
-
SHA256
bed37966a0fba606de49f58a5af9c7b6a5aec32b44eee17656e6bc88dcffa3dc
-
SHA512
22f1871ad62c3dc4986a7e2157a17632afb171056269281c61a51c24efb681a790959b573ae89f3551258b90dac4be7f0d2b06e075f903e7f3d337aa6ce37a01
-
SSDEEP
768:hWJJlgIBmH84b7+c+gAHWirKoavYUqQf1zBmQzTGfmgyqwC6:ifBm5NiGoavY5Qf1zwQVgvwl
Malware Config
Signatures
Files
-
bed37966a0fba606de49f58a5af9c7b6a5aec32b44eee17656e6bc88dcffa3dc.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE