Static task
static1
Behavioral task
behavioral1
Sample
a8d76f47ac11ed4e1b97ae041b2a2bdaa0b18310324dcd289bcf07d475296ff1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8d76f47ac11ed4e1b97ae041b2a2bdaa0b18310324dcd289bcf07d475296ff1.exe
Resource
win10v2004-20220812-en
General
-
Target
a8d76f47ac11ed4e1b97ae041b2a2bdaa0b18310324dcd289bcf07d475296ff1
-
Size
490KB
-
MD5
b461441b02eca8b49ea1555e9929eef2
-
SHA1
6495cf853f001ca97e46aed4a62c438424357d50
-
SHA256
a8d76f47ac11ed4e1b97ae041b2a2bdaa0b18310324dcd289bcf07d475296ff1
-
SHA512
d3fe64d94627abd75113a7e2ab774630777b142f89f7e6014a43a911692e466128676c2cca46545ca7b8293cf4e0ac50adc0725b958db5ef561bb171eed091d9
-
SSDEEP
12288:2D1DF6Q/HytlQhGTbxT+aObZzDXwNJ0dtnlmyKZ/KxydwKT:2DBD/HSAETHObZHgNgtnlmybxCwg
Malware Config
Signatures
Files
-
a8d76f47ac11ed4e1b97ae041b2a2bdaa0b18310324dcd289bcf07d475296ff1.exe windows x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 484KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE