Static task
static1
Behavioral task
behavioral1
Sample
74021dd068fdb51451c4a49c9f68f6ce58e6578e12eb038e61b378880de176dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74021dd068fdb51451c4a49c9f68f6ce58e6578e12eb038e61b378880de176dd.exe
Resource
win10v2004-20220812-en
General
-
Target
74021dd068fdb51451c4a49c9f68f6ce58e6578e12eb038e61b378880de176dd
-
Size
141KB
-
MD5
514214c0d388642c3382480509377649
-
SHA1
a7792f0b038af80b4b3c05b41531544b55b2ffe4
-
SHA256
74021dd068fdb51451c4a49c9f68f6ce58e6578e12eb038e61b378880de176dd
-
SHA512
23cbdeeb36541a6caca26aada1ce0c264eed768d9734383fba309c86328f089624898b4b21ea26c35d0ff797fb9e8d8a51c54398a09981b29ee47ea7bd1b8b69
-
SSDEEP
3072:eiZePzg2v1Sm243URXyRTk5eBZCG4Xbn4PNez:1ZIzg2Z2SUJCge/CGMbnk
Malware Config
Signatures
Files
-
74021dd068fdb51451c4a49c9f68f6ce58e6578e12eb038e61b378880de176dd.exe windows x86
69906a0db67997845df2cb3138ccd6dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
SetThreadContext
WriteProcessMemory
GetThreadContext
CreateProcessA
GetModuleFileNameA
GetStartupInfoA
VirtualAllocEx
Sections
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE