Static task
static1
Behavioral task
behavioral1
Sample
d96344ddae3642c90bb88264e8b10736fdc00ff4590a1ca09a0a3adf24587218.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d96344ddae3642c90bb88264e8b10736fdc00ff4590a1ca09a0a3adf24587218.exe
Resource
win10v2004-20220812-en
General
-
Target
d96344ddae3642c90bb88264e8b10736fdc00ff4590a1ca09a0a3adf24587218
-
Size
1.7MB
-
MD5
ff8b7dd4b03a07e4c4ef70034fc50361
-
SHA1
7573a7978820c86117e6ab86be25cf1bd918982c
-
SHA256
d96344ddae3642c90bb88264e8b10736fdc00ff4590a1ca09a0a3adf24587218
-
SHA512
47f202d606b5eb7ec6fb025285f1661103ea39d11d8ae7a47dc7e1bfea9c4a0d311d91eae4b23f069b0eb573ee366fef25f175ab6b71b71467892e8430da0d1b
-
SSDEEP
49152:Io4w19rlOhLXJ/Ppg/Kx16G4EOUeq2iyOO2r:hBlyNTeqYOHr
Malware Config
Signatures
Files
-
d96344ddae3642c90bb88264e8b10736fdc00ff4590a1ca09a0a3adf24587218.exe windows x86
fdbfec85672f73d2a4d49635454936d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 1.6MB - Virtual size: 29.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE