Static task
static1
Behavioral task
behavioral1
Sample
d44fa12807424d3cd0c51fbc93634ad77c149d80323c8be5274fd4a96636ee4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d44fa12807424d3cd0c51fbc93634ad77c149d80323c8be5274fd4a96636ee4b.exe
Resource
win10v2004-20220812-en
General
-
Target
d44fa12807424d3cd0c51fbc93634ad77c149d80323c8be5274fd4a96636ee4b
-
Size
25KB
-
MD5
bca696b3661ebd0702223185432024b5
-
SHA1
95f77e1d7ec0217f00189e17f7f5c3c1e59433ac
-
SHA256
d44fa12807424d3cd0c51fbc93634ad77c149d80323c8be5274fd4a96636ee4b
-
SHA512
8c85973219d3b571af84dccf934d185e9fea3ba205724d98e9e983a7bfdda15aa71b2742bf3c42ecf7bcb481895c6bd592b8211b91776970512e65c1e7929aaf
-
SSDEEP
768:E6Fw2VTJAVbM5CptmPaJ2S3ZoKtf/E24ImV7U:E691sbM5YGt6R/E2pmK
Malware Config
Signatures
Files
-
d44fa12807424d3cd0c51fbc93634ad77c149d80323c8be5274fd4a96636ee4b.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE