Static task
static1
Behavioral task
behavioral1
Sample
e7a73de02e8d15501ec86621d91c15393250fb6397a3ac950361ffb5793539de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e7a73de02e8d15501ec86621d91c15393250fb6397a3ac950361ffb5793539de.exe
Resource
win10v2004-20221111-en
General
-
Target
e7a73de02e8d15501ec86621d91c15393250fb6397a3ac950361ffb5793539de
-
Size
77KB
-
MD5
17ccf55354107f2f9afa1c536e11cec5
-
SHA1
797f2bcbba1326d06db02c163b1ea329c02d6716
-
SHA256
e7a73de02e8d15501ec86621d91c15393250fb6397a3ac950361ffb5793539de
-
SHA512
ddb5d033a53d0226aa3fc7742b159f5d2780e5d2f00c9dac2241da088fde435cc29701c22516fbf979c209367b4e71ed98589e052a4f96bad6b1171da2dbf826
-
SSDEEP
1536:XAWW0zj2Fk5ix3on2NgNg+UXW/VXahPpbcE6qH+7+m7SBLD7o:Pb265GonSgW+xyxbcE6qR0k7o
Malware Config
Signatures
Files
-
e7a73de02e8d15501ec86621d91c15393250fb6397a3ac950361ffb5793539de.exe windows x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.topo0 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE