Static task
static1
Behavioral task
behavioral1
Sample
b0eebb975508921d136e35939dca225250a6dba5861692d29c3d7c9bbdfe9ad7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0eebb975508921d136e35939dca225250a6dba5861692d29c3d7c9bbdfe9ad7.exe
Resource
win10v2004-20220812-en
General
-
Target
b0eebb975508921d136e35939dca225250a6dba5861692d29c3d7c9bbdfe9ad7
-
Size
1.8MB
-
MD5
28407f30d20bc1950f4c21be68b4a0d2
-
SHA1
448d546f000fbaa5e22e5b20f946da1b7c718791
-
SHA256
b0eebb975508921d136e35939dca225250a6dba5861692d29c3d7c9bbdfe9ad7
-
SHA512
d20849cb0553d3f83fc4dfe6529126b045905abe9017a8ea7b13b1cd399d28d3313ff21adb476189da69ea34b4742b1cc2592c08df61bcbe5e002378a59c00b9
-
SSDEEP
12288:Iooooooooooooooooooooooooooooooooooooooooooooooooo6:O
Malware Config
Signatures
Files
-
b0eebb975508921d136e35939dca225250a6dba5861692d29c3d7c9bbdfe9ad7.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 33KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE