Static task
static1
Behavioral task
behavioral1
Sample
a04dc90172a05347830bc639c39ee6c1a72c64b3a51eeb10082915842d08d747.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a04dc90172a05347830bc639c39ee6c1a72c64b3a51eeb10082915842d08d747.exe
Resource
win10v2004-20220812-en
General
-
Target
a04dc90172a05347830bc639c39ee6c1a72c64b3a51eeb10082915842d08d747
-
Size
103KB
-
MD5
005e521a72ae3c852b75364aadb28cdc
-
SHA1
8b2907a189f46e9e6c66fd28c8a8639acef9b9cd
-
SHA256
a04dc90172a05347830bc639c39ee6c1a72c64b3a51eeb10082915842d08d747
-
SHA512
1343b69e6d913f07cab1e0ed4dacf7030efff5a31b688b853b424ac78eb266a025bc8593b91f9f140900220995625833c4e1614ffde68d93a6ca8045a0d92698
-
SSDEEP
1536:ZMlBAlkop/d2w8yAPnuy6FwkLQF18I86xlV9r32FV0+MFVPHUYZwak0n+J:ZMlBA3/8y+uy4wz7NSV0+qVHGakF
Malware Config
Signatures
Files
-
a04dc90172a05347830bc639c39ee6c1a72c64b3a51eeb10082915842d08d747.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 62KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE