Static task
static1
Behavioral task
behavioral1
Sample
d1ba5a4d51aa073543f5e92a14754a877c60f4c1abea4dd544a16da6c20605b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1ba5a4d51aa073543f5e92a14754a877c60f4c1abea4dd544a16da6c20605b4.exe
Resource
win10v2004-20220812-en
General
-
Target
d1ba5a4d51aa073543f5e92a14754a877c60f4c1abea4dd544a16da6c20605b4
-
Size
101KB
-
MD5
9a5da57a4d2780cca6b4d545856a6db0
-
SHA1
ec0a527d399ed75837dcb2be3feeeca62912bea7
-
SHA256
d1ba5a4d51aa073543f5e92a14754a877c60f4c1abea4dd544a16da6c20605b4
-
SHA512
8a2eb6445b7131869440dd550393f8ecee241371c61d53d69fe790dddfed4161145c4bbe68becde3e2b5f337a7d161f787926b6d9ffe4b1a73f8176748b8a6ba
-
SSDEEP
3072:0fp5Z8MtI5PhE2OputFY5nhT9kr2JBWdWZt:w5ZWx6uTYlhT6iuYt
Malware Config
Signatures
Files
-
d1ba5a4d51aa073543f5e92a14754a877c60f4c1abea4dd544a16da6c20605b4.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 68KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE