Static task
static1
Behavioral task
behavioral1
Sample
b4536e36c171b96f5dab13ccb08952249464ab28370126b0793684de035c8b11.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4536e36c171b96f5dab13ccb08952249464ab28370126b0793684de035c8b11.exe
Resource
win10v2004-20221111-en
General
-
Target
b4536e36c171b96f5dab13ccb08952249464ab28370126b0793684de035c8b11
-
Size
57KB
-
MD5
ff65db66be3d2f1e7a87b9c2795144b0
-
SHA1
c8a1bd4974719c5ac117aa51e6d4238d29e5f6d1
-
SHA256
b4536e36c171b96f5dab13ccb08952249464ab28370126b0793684de035c8b11
-
SHA512
14fe931d226c8409c8375bcad9c55cb2481bcdf77ed8290bf443d2fcbe552d40cd3f3034f57533fffbf8ad22893b751c44c514f65ecef2b37a7e231f4260721d
-
SSDEEP
1536:0FGQjNsLP13pH0XqdpC0ozlqE1vsKZK3z5v1BqnT:08ui7z06dpC0dE1tMD5tonT
Malware Config
Signatures
Files
-
b4536e36c171b96f5dab13ccb08952249464ab28370126b0793684de035c8b11.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 47KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE