Static task
static1
Behavioral task
behavioral1
Sample
f665eebba7c0bdd1341d0e7c6ce75037557703c25212a7ba154e736359564abb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f665eebba7c0bdd1341d0e7c6ce75037557703c25212a7ba154e736359564abb.exe
Resource
win10v2004-20220812-en
General
-
Target
f665eebba7c0bdd1341d0e7c6ce75037557703c25212a7ba154e736359564abb
-
Size
304KB
-
MD5
f50c24f403218610b5968b9b21d28a92
-
SHA1
b225f81bb091c2ebc3a81b15b982ab4be502d93f
-
SHA256
f665eebba7c0bdd1341d0e7c6ce75037557703c25212a7ba154e736359564abb
-
SHA512
9aad56bff5ad2a7b8f533883a73f98ef6e58f5fc1f08bfba07380b135d9ad9464531b8d27760ba0781fa737bef65535a45f3ed5aa4fc22b2fef2f04c30abeabd
-
SSDEEP
3072:Q/xJKlrFxHr0/IB8+Nm8gl8EXKb3VEuUBJfN+pmWyVEuUBJfoAED:2ypxHQ/IrgCESVPKfNsoVPKfoAE
Malware Config
Signatures
Files
-
f665eebba7c0bdd1341d0e7c6ce75037557703c25212a7ba154e736359564abb.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iwe0sgrm Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
802izwe5 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f1dfid6q Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE