Static task
static1
Behavioral task
behavioral1
Sample
94116eff6690f9964cd09be0b7a1501c808c10178c3866346426494770b48af7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94116eff6690f9964cd09be0b7a1501c808c10178c3866346426494770b48af7.exe
Resource
win10v2004-20220901-en
General
-
Target
94116eff6690f9964cd09be0b7a1501c808c10178c3866346426494770b48af7
-
Size
115KB
-
MD5
0a05ae0eb65bbb99ec41e0fd6fa6c4dc
-
SHA1
3a84d2e17c955e46b9e0280c84782f77100f1c17
-
SHA256
94116eff6690f9964cd09be0b7a1501c808c10178c3866346426494770b48af7
-
SHA512
587e78c386156e8fbbbaca6d3e2ab50c0c5927f03362e526104d83cf5abb24afedc940417b70d4b0e77170498e57325b8b99ff38024233433d5abf0603684c25
-
SSDEEP
3072:u12o9Gv5Iu+YGEZkV0YBYNOSC0sG7tE8f5SKIW7n:nxIu+YG4W0OiC0sG755SZW7n
Malware Config
Signatures
Files
-
94116eff6690f9964cd09be0b7a1501c808c10178c3866346426494770b48af7.exe windows x86
d6fbf53d54594b4ab2eda375a27992d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
lstrcmpA
Sleep
ExitProcess
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Vpsen Bb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xqlybvvv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Fmjjbsbu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 165B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE