Static task
static1
Behavioral task
behavioral1
Sample
d9f09681d802b67934d8ae15fdb63b647b17744740d565acb5bed6dd9ceb05c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9f09681d802b67934d8ae15fdb63b647b17744740d565acb5bed6dd9ceb05c9.exe
Resource
win10v2004-20220812-en
General
-
Target
d9f09681d802b67934d8ae15fdb63b647b17744740d565acb5bed6dd9ceb05c9
-
Size
411KB
-
MD5
2a3daf637674e66413650d1dc13288cd
-
SHA1
17fbee431a0c7c00a229f11d0712353664e11625
-
SHA256
d9f09681d802b67934d8ae15fdb63b647b17744740d565acb5bed6dd9ceb05c9
-
SHA512
17305bbd68120a6bc5a5935840c0193f1409526d1703b0228a393b482daa213c9450dffb32bd4c22856955a1d7991a410a6c7af14fb045d8155c514f4a3d274d
-
SSDEEP
12288:hHUQ3KyFAR7J7jowiGyDMEWyBcb0TVLrYEZf:h0Qago26PZxQTlXf
Malware Config
Signatures
Files
-
d9f09681d802b67934d8ae15fdb63b647b17744740d565acb5bed6dd9ceb05c9.exe windows x86
37c0608f24ea4f5b69005df26d5dd626
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
Sections
CODE Size: 317KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 26KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bedrock Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE