Static task
static1
Behavioral task
behavioral1
Sample
cf79d051e6067911184c98a41d59400d978f12dfa519497918a6518a395570a0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf79d051e6067911184c98a41d59400d978f12dfa519497918a6518a395570a0.exe
Resource
win10v2004-20221111-en
General
-
Target
cf79d051e6067911184c98a41d59400d978f12dfa519497918a6518a395570a0
-
Size
54KB
-
MD5
f0aa950b02dbe6781b65a763f7bdbee5
-
SHA1
40a71d8df76f289cfa656e52fc4b6e1ed6062364
-
SHA256
cf79d051e6067911184c98a41d59400d978f12dfa519497918a6518a395570a0
-
SHA512
4f8be0575603f6d1f5e34635103daf9bfd32bcbf57a29aeae9cfb284c5491e4c0712cd472bf425d007d906907666aa8f9851d6ce8bb22548a29f2cf75209eda7
-
SSDEEP
768:5lHK1MqXuulf5zgU8texdItcbuXkHsKFi73Sm6xpn5DWRArAaTOw3kqt:TH6Tlf58U8texYXkHsKMSjfn4RGiw3kO
Malware Config
Signatures
Files
-
cf79d051e6067911184c98a41d59400d978f12dfa519497918a6518a395570a0.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE