Static task
static1
Behavioral task
behavioral1
Sample
0ed177a8d7fbfb9d6e16ce2a736c22c02a68b68024f166d10c7b83a283062646.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0ed177a8d7fbfb9d6e16ce2a736c22c02a68b68024f166d10c7b83a283062646.exe
Resource
win10v2004-20221111-en
General
-
Target
0ed177a8d7fbfb9d6e16ce2a736c22c02a68b68024f166d10c7b83a283062646
-
Size
1.8MB
-
MD5
a652bc9ab677f95588e6fc71aad994cc
-
SHA1
cf53450ad080025080a74f808b3ad8c790b276fa
-
SHA256
0ed177a8d7fbfb9d6e16ce2a736c22c02a68b68024f166d10c7b83a283062646
-
SHA512
6ca085733c23a3029379babbdb6da63a51cbac422cee260823980afb9a4f6cd97f21dfab5f33b9d8cbf1313ee449ce57130a8df9a36abc1504f233d74379648b
-
SSDEEP
49152:cU5rGUYmv4NMaJ60R62RMY+qwcbdreZcQXIZeckn0EgF:cU5rGUYmv4us6c62OYhbZeWQ44Jn0Eq
Malware Config
Signatures
Files
-
0ed177a8d7fbfb9d6e16ce2a736c22c02a68b68024f166d10c7b83a283062646.exe windows x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 9.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ