Static task
static1
Behavioral task
behavioral1
Sample
33061c4c0c8d504d6659b7f02e39f3497d60d7d29d60ab6ccfe11dfc66966368.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33061c4c0c8d504d6659b7f02e39f3497d60d7d29d60ab6ccfe11dfc66966368.exe
Resource
win10v2004-20220901-en
General
-
Target
33061c4c0c8d504d6659b7f02e39f3497d60d7d29d60ab6ccfe11dfc66966368
-
Size
128KB
-
MD5
8ee40b18c78951ad7d509961b36c65cf
-
SHA1
b1661e884d001de3c393e34e5ed9a27b869949df
-
SHA256
33061c4c0c8d504d6659b7f02e39f3497d60d7d29d60ab6ccfe11dfc66966368
-
SHA512
6f4ad80359bfb5677ffe7cb195ce91160b9ad6372444968b00d393a60b82686406cb23f10e8e3da8bc9c86803d37b771ab639b5f6e5c6df32f299ecc6fb6e212
-
SSDEEP
3072:hC1nCOlq2ygBAhAvkEfSsZpLxULpNgKfezp1XhL:s1nCOqIfSipLxULLnGdph
Malware Config
Signatures
Files
-
33061c4c0c8d504d6659b7f02e39f3497d60d7d29d60ab6ccfe11dfc66966368.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 122KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE