Static task
static1
Behavioral task
behavioral1
Sample
d1ab74aff0c2666436652685a474d42a78faafd1cae568969ed013e17ae5fe4d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d1ab74aff0c2666436652685a474d42a78faafd1cae568969ed013e17ae5fe4d.exe
Resource
win10v2004-20220812-en
General
-
Target
d1ab74aff0c2666436652685a474d42a78faafd1cae568969ed013e17ae5fe4d
-
Size
48KB
-
MD5
349fdc4f6b16c2f29929b66a6e0d3835
-
SHA1
0a0e2dda5791d48632e51585045c634be4e581fa
-
SHA256
d1ab74aff0c2666436652685a474d42a78faafd1cae568969ed013e17ae5fe4d
-
SHA512
55680d0397f2ea3cbd2b6b7dbc93164363dc8b7ed5301826d6ed6e22699b12ab5f7e5eab085096bc2ce4d3b9ba68dffb9d2a15c3dd1822728da16bc91c60d0a6
-
SSDEEP
768:4bTVwG8+YKs5kWPEW2rij6z6CNfgRN5pRLPvyCbcw/FNcupfRA3j:+TmGoKs5aGO6ClgR7pRT/Ykq+O3j
Malware Config
Signatures
Files
-
d1ab74aff0c2666436652685a474d42a78faafd1cae568969ed013e17ae5fe4d.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 42KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE