Static task
static1
Behavioral task
behavioral1
Sample
b475d391389aa0728369198eff23a524bd801333201c7bae4eed7c057242f15c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b475d391389aa0728369198eff23a524bd801333201c7bae4eed7c057242f15c.exe
Resource
win10v2004-20220812-en
General
-
Target
b475d391389aa0728369198eff23a524bd801333201c7bae4eed7c057242f15c
-
Size
31KB
-
MD5
779139731994b832051355b436fcd1fe
-
SHA1
f02bf0edc76c144686df47e68c36eddd65ae7923
-
SHA256
b475d391389aa0728369198eff23a524bd801333201c7bae4eed7c057242f15c
-
SHA512
2376bc0e7f64a9f8165da01fdeda1bc749e41f69d45317befdd132e53f3e2393a10bdf31dc620d7ef2f904dbf4065b12172e347cc587bc8336ab921cb24a284a
-
SSDEEP
768:nlEE7OuMZMeE5UTvhJwElGakgf1+H8V7/siBd/:n7O5vXl1kgfAH8BsCd
Malware Config
Signatures
Files
-
b475d391389aa0728369198eff23a524bd801333201c7bae4eed7c057242f15c.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 21KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE