Static task
static1
Behavioral task
behavioral1
Sample
c7242c0bdce1a1cf8671bfcf3b3164e860e7b31f5e2da8e8416ef9c2cb30da58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7242c0bdce1a1cf8671bfcf3b3164e860e7b31f5e2da8e8416ef9c2cb30da58.exe
Resource
win10v2004-20220812-en
General
-
Target
c7242c0bdce1a1cf8671bfcf3b3164e860e7b31f5e2da8e8416ef9c2cb30da58
-
Size
215KB
-
MD5
13d9ffdb2b26a863e992393f68e6f4eb
-
SHA1
6e766aca22c518c39ca167bca9661b0958cd766d
-
SHA256
c7242c0bdce1a1cf8671bfcf3b3164e860e7b31f5e2da8e8416ef9c2cb30da58
-
SHA512
d0a02315293c4e3f91d10c36af9b39e9c11cfc39ecdd6d5bb771425ab03f0529d1e8ce547b99856d079032d75eee3bec96d2f6943dc641672311cf2e78aab3e9
-
SSDEEP
6144:FlqdQcdDlkPcBsKgqbq7UHXznhHFfsHmytCfM:Flqdbd20X7qgHjn/fsHT
Malware Config
Signatures
Files
-
c7242c0bdce1a1cf8671bfcf3b3164e860e7b31f5e2da8e8416ef9c2cb30da58.exe windows x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
WINEXEC Size: 173KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WINEXEC Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE