Static task
static1
Behavioral task
behavioral1
Sample
defd7b15049c4f0e8448de4b42fafc08c596725ab85711cdf074b16d6a98a05b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
defd7b15049c4f0e8448de4b42fafc08c596725ab85711cdf074b16d6a98a05b.exe
Resource
win10v2004-20220812-en
General
-
Target
defd7b15049c4f0e8448de4b42fafc08c596725ab85711cdf074b16d6a98a05b
-
Size
538KB
-
MD5
a9d0fb9fc4c49ce4fa4be021e5837310
-
SHA1
1173bfadd0d5291c149bb8d41ffd0af1a04fea7c
-
SHA256
defd7b15049c4f0e8448de4b42fafc08c596725ab85711cdf074b16d6a98a05b
-
SHA512
2bd4dd7aa9ce0055c6e626c0cced76e5f33606871eda8e01ed4ec7aed2aa408ae895ced6e6c60bb1988f37fc422743eca9b90578e0aaeeec2bd43a4d4561ea06
-
SSDEEP
12288:PL4euHS3QbVuapCsTry9A+5DR7hTcRdzYffrSY:ceunuaD/y9AIV7ZczMrf
Malware Config
Signatures
Files
-
defd7b15049c4f0e8448de4b42fafc08c596725ab85711cdf074b16d6a98a05b.exe windows x86
12cb72fbf3308a9787db139482b7d132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess
Sections
.text Size: 80KB - Virtual size: 129KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 24KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 402KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE