Static task
static1
Behavioral task
behavioral1
Sample
a574b4c5ac7501158b4da7a377c7182ce2bfdda63961c5fd8e406c043195a5e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a574b4c5ac7501158b4da7a377c7182ce2bfdda63961c5fd8e406c043195a5e5.exe
Resource
win10v2004-20220812-en
General
-
Target
a574b4c5ac7501158b4da7a377c7182ce2bfdda63961c5fd8e406c043195a5e5
-
Size
98KB
-
MD5
3c3b135d092a38396d43834be7fb124f
-
SHA1
d3e1c849f7c58521fc00d682071a7cc8bb38ae9a
-
SHA256
a574b4c5ac7501158b4da7a377c7182ce2bfdda63961c5fd8e406c043195a5e5
-
SHA512
a94546e03a376f2561825df64b73128547754a364c710cbdd75e6c98006fee067b142c8fffc63e5202f2aa06a167fa5efc9559000ea2cac9179fc33c63be7650
-
SSDEEP
384:CnTA7nYn7phFisVl/CQYBUITRBsmvh7TN:oaYlhzVkLzRvvj
Malware Config
Signatures
Files
-
a574b4c5ac7501158b4da7a377c7182ce2bfdda63961c5fd8e406c043195a5e5.exe windows x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
. Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c2sa Size: 89KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE