Static task
static1
Behavioral task
behavioral1
Sample
b56867cabe33a877a2b92f68401e3281fe6c9d08210d4d0f14effb18ec94ec41.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b56867cabe33a877a2b92f68401e3281fe6c9d08210d4d0f14effb18ec94ec41.exe
Resource
win10v2004-20221111-en
General
-
Target
b56867cabe33a877a2b92f68401e3281fe6c9d08210d4d0f14effb18ec94ec41
-
Size
568KB
-
MD5
8203c64bbbb93b1ddb78f4f7b92dfd40
-
SHA1
ffb3c2569c1652e5a59142dcd5035a4cbcf67e70
-
SHA256
b56867cabe33a877a2b92f68401e3281fe6c9d08210d4d0f14effb18ec94ec41
-
SHA512
69b6e48d2622067ec1c76c32d8e4f817891cd27ae5dc966d2a9647f23242729378d9afb960a80537e6bff54a21f6841c4dfc483e4b336dd774e4c2d87a82f288
-
SSDEEP
12288:IJargRFLPgrbAJ2mfhCNy7yCSqJZl82OWOl2JguUB2Eb:IAgRhIrb+7hC87yCJ8IOl2JgNkq
Malware Config
Signatures
Files
-
b56867cabe33a877a2b92f68401e3281fe6c9d08210d4d0f14effb18ec94ec41.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7vskdai5 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6wwvgman Size: - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
obnt..iu Size: 490KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j.5tc5wr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ