Static task
static1
Behavioral task
behavioral1
Sample
f28cdcb6f29a0bfde7bc450d68a2253dafc67bd64dbb4886e212ef1bc215e957.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f28cdcb6f29a0bfde7bc450d68a2253dafc67bd64dbb4886e212ef1bc215e957.exe
Resource
win10v2004-20221111-en
General
-
Target
f28cdcb6f29a0bfde7bc450d68a2253dafc67bd64dbb4886e212ef1bc215e957
-
Size
37KB
-
MD5
7ce447e3bd366fe00e4d3a5f1bcf13f3
-
SHA1
8a22e5690e5893c6de42a04b03ed1967707c8ff6
-
SHA256
f28cdcb6f29a0bfde7bc450d68a2253dafc67bd64dbb4886e212ef1bc215e957
-
SHA512
51ef80faf602154baed5d6d4aa41b87d2bb040f00106c11a1192379f665360722a8a4f00dc297614113501b9f77c8201e6cb039c22ec73d9c1f4243f116dd3c2
-
SSDEEP
768:/2ofQD3FVVgz7aSPReR/ZC95/mE2CGWqhZQkAxdHGHd8cBUOpDB4W533EGV/c:/2ooD1Ez7pp2RC95/YlLQkqmZvpOW5nG
Malware Config
Signatures
Files
-
f28cdcb6f29a0bfde7bc450d68a2253dafc67bd64dbb4886e212ef1bc215e957.exe windows x86
92009019dee90696f2364d47b68ae436
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessInternalW
CreateFileW
ExitProcess
GetFileSize
GetModuleFileNameW
GetThreadContext
GlobalAlloc
ReadFile
ResumeThread
VirtualAllocEx
ntdll
NtSetContextThread
NtWriteVirtualMemory
ZwUnmapViewOfSection
Sections
.text Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 42B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE