Static task
static1
Behavioral task
behavioral1
Sample
da461ffdb0d1a358f5e553edfe149231ed6fc616cb2553cc66bf9387295c7e70.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
da461ffdb0d1a358f5e553edfe149231ed6fc616cb2553cc66bf9387295c7e70.exe
Resource
win10v2004-20221111-en
General
-
Target
da461ffdb0d1a358f5e553edfe149231ed6fc616cb2553cc66bf9387295c7e70
-
Size
345KB
-
MD5
f9bcb3cbc34bdd06df7947411ada21c9
-
SHA1
074c381a64c05f5213ab3bbf841e0864909ff027
-
SHA256
da461ffdb0d1a358f5e553edfe149231ed6fc616cb2553cc66bf9387295c7e70
-
SHA512
f27d86f8a58219e10245eed9152926f046dbc9c80d704ab4724cbeec4fb417624a970942a4ce919d32d2069592a22f41036312846441f5bfc348f0609df80798
-
SSDEEP
6144:PVyIpzc5C2Hokmg499eKM2cCmG3wpZCwUclQi2rve2YA0w2em9E:PVLpzsl4DeKhmG4ZrUclQi2rG2MwM9E
Malware Config
Signatures
Files
-
da461ffdb0d1a358f5e553edfe149231ed6fc616cb2553cc66bf9387295c7e70.exe windows x86
2c35ed123bf7fb5532653325910c7a41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree
Sections
CODE Size: 327KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.llydd Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE