Static task
static1
Behavioral task
behavioral1
Sample
d89dbaeca9fa644819dc76d6a189b4dac7eaa6405f799f81db682fbc9d778764.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d89dbaeca9fa644819dc76d6a189b4dac7eaa6405f799f81db682fbc9d778764.exe
Resource
win10v2004-20220812-en
General
-
Target
d89dbaeca9fa644819dc76d6a189b4dac7eaa6405f799f81db682fbc9d778764
-
Size
56KB
-
MD5
9546395963fc95c413cfc6e133d46b2f
-
SHA1
70adf19bd5d9b9c620f6279ce0440f6b09f38fa5
-
SHA256
d89dbaeca9fa644819dc76d6a189b4dac7eaa6405f799f81db682fbc9d778764
-
SHA512
cb79f5fb97d379816f8a0c531e1407fdb449b507ada4d7ae320a1c8803006a90056abca43a77f926b77ad213281a77cf3199f231a2c02b082294913a97fbd32f
-
SSDEEP
1536:7dMN+V8lZAYBGhzq2aZ4pOmUwaXMkZiNkBVU5R7:b63uz1s18kPiR7
Malware Config
Signatures
Files
-
d89dbaeca9fa644819dc76d6a189b4dac7eaa6405f799f81db682fbc9d778764.exe windows x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiao Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE