Static task
static1
Behavioral task
behavioral1
Sample
b35a15675ec28712e642594f361ec07d466440d2b6b11815841d72d51b38e71a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b35a15675ec28712e642594f361ec07d466440d2b6b11815841d72d51b38e71a.exe
Resource
win10v2004-20220812-en
General
-
Target
b35a15675ec28712e642594f361ec07d466440d2b6b11815841d72d51b38e71a
-
Size
171KB
-
MD5
f40ff6f6f0d4f4bc6df78a5387e188c2
-
SHA1
caeb6de74020aa152ffedbeed2d51b6c3055faa7
-
SHA256
b35a15675ec28712e642594f361ec07d466440d2b6b11815841d72d51b38e71a
-
SHA512
65e7bc5cc849cd87f2cc1073665d6f9e5d05dfb21b4a1250e40f83cb8fcd370e562c62b870590aa83727d75c575e5cad4e879c818e6e8a4f1225cf743a24c393
-
SSDEEP
3072:BKwEG5GB1aocrvV56aMTSZ68BAhs8ATiKZsF1pMkvZ4gqeaX+ayyjusOcE25:IwMYoGvV56aESZ9VeKZsX6kqBevay/sz
Malware Config
Signatures
Files
-
b35a15675ec28712e642594f361ec07d466440d2b6b11815841d72d51b38e71a.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 154KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE