Static task
static1
Behavioral task
behavioral1
Sample
2457b882184c7edda9d966e6bcb5ffaee53407cf93a53380aa15a5049ab13388.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2457b882184c7edda9d966e6bcb5ffaee53407cf93a53380aa15a5049ab13388.exe
Resource
win10v2004-20220812-en
General
-
Target
2457b882184c7edda9d966e6bcb5ffaee53407cf93a53380aa15a5049ab13388
-
Size
206KB
-
MD5
2d44316f3a576ee0b45893838bb3be30
-
SHA1
07c177f94d56fee10c9ed24540acc6f7f0963fa0
-
SHA256
2457b882184c7edda9d966e6bcb5ffaee53407cf93a53380aa15a5049ab13388
-
SHA512
cbcbe41e71d16b02e29b2b49699b171cf1adc6f5200994126d4cb0da82a93aec1448fca3a84e258d80e7af7ecb21904a12e6fd2fce40ac4ac3a7c0b00b7958fa
-
SSDEEP
3072:u1xFaC7b/YGrwwlSNxKKhFdund+62fzFyc9hEDai93Bk4qM4y84zbVTm9IbHVi:sxFNP/Yuwt+KvonEtFGDaGOZIbHVi
Malware Config
Signatures
Files
-
2457b882184c7edda9d966e6bcb5ffaee53407cf93a53380aa15a5049ab13388.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.text Size: 76KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GFSDEWRR Size: 25KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE