Static task
static1
Behavioral task
behavioral1
Sample
c24f7a577c212ff5555d7723196a674055dd67c61c16dcfe1c875aff6cd4b8ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c24f7a577c212ff5555d7723196a674055dd67c61c16dcfe1c875aff6cd4b8ef.exe
Resource
win10v2004-20220812-en
General
-
Target
c24f7a577c212ff5555d7723196a674055dd67c61c16dcfe1c875aff6cd4b8ef
-
Size
33KB
-
MD5
5898252b4240221c99566dc6d28f4ef0
-
SHA1
d1d2daf358c82016245a3cbe7a1e23559ebed717
-
SHA256
c24f7a577c212ff5555d7723196a674055dd67c61c16dcfe1c875aff6cd4b8ef
-
SHA512
85c0ef157e5a6367d44b797c2e072c2ec68c3a2d7c0a08c2ff44c25cff83b46c7ea9242606818bee96889756ffd798171b9c17215a53c82ffec61118f8e16d32
-
SSDEEP
768:bav+dyKUn2Tpgt2FVrGVr8sysVWU1pjbowE4Ig9NYP:S+E12TWaJa8sE3wN
Malware Config
Signatures
Files
-
c24f7a577c212ff5555d7723196a674055dd67c61c16dcfe1c875aff6cd4b8ef.exe windows x86
c5aa9dac46e733ed24e27e3f02168a47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
advapi32
RegOpenKeyA
crypt32
CryptUnprotectData
ole32
CreateStreamOnHGlobal
shell32
ShellExecuteA
shlwapi
StrStrIA
user32
wsprintfA
Sections
PESEC0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PESEC1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PESEC2 Size: 298B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 677B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ