Static task
static1
Behavioral task
behavioral1
Sample
d00312ee8397bcd832c9a5fda3e16bc313c5e258ada6139f51b52af756752a46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d00312ee8397bcd832c9a5fda3e16bc313c5e258ada6139f51b52af756752a46.exe
Resource
win10v2004-20221111-en
General
-
Target
d00312ee8397bcd832c9a5fda3e16bc313c5e258ada6139f51b52af756752a46
-
Size
446KB
-
MD5
77c30702e9e0478ea079caf221a95a26
-
SHA1
18c3c73732f1cd0c47e468a30a5dee14d3ec17ba
-
SHA256
d00312ee8397bcd832c9a5fda3e16bc313c5e258ada6139f51b52af756752a46
-
SHA512
bf8a353d837df3197f5a766543c99fd626bea0455f751771fb2664542b6d6f0650cbc42341838ea88dc7b0c7bfe6ef432f89d07140b8f18b68c75767b9b16fb2
-
SSDEEP
6144:oIy424iSoWHxWtYaHYecAVJaktkMgV5Dd9zancLc4C5Reo35DTLdN5odNnduGVnn:oIVwWRVgHnJzWR0CgReCHTGVmacgl
Malware Config
Signatures
Files
-
d00312ee8397bcd832c9a5fda3e16bc313c5e258ada6139f51b52af756752a46.exe windows x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 972KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
yuxuan Size: 188B - Virtual size: 188B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE