Static task
static1
Behavioral task
behavioral1
Sample
b919e199c92b396f2732bf2df66a925e6c76be12891a9b51ca800602ee97f03a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b919e199c92b396f2732bf2df66a925e6c76be12891a9b51ca800602ee97f03a.exe
Resource
win10v2004-20221111-en
General
-
Target
b919e199c92b396f2732bf2df66a925e6c76be12891a9b51ca800602ee97f03a
-
Size
104KB
-
MD5
317d30db4172f680bffc2e492e74d35d
-
SHA1
25ec854663c37ba09c00f16a3e8041bc8fcbe25f
-
SHA256
b919e199c92b396f2732bf2df66a925e6c76be12891a9b51ca800602ee97f03a
-
SHA512
0c1413c6670d80b2cb6678c32b4967ed460b4824aaf51da4904c61a9114529fe4ad35f7de71b1822520dc27c54bd79b8922fa1e976a0121a1ab703798c655ee2
-
SSDEEP
1536:rhqlUmQxFTFFdkqYfQUOCjtNaQnyeXhdWe5dZ+lbr:UY1+fNOreXhdWen
Malware Config
Signatures
Files
-
b919e199c92b396f2732bf2df66a925e6c76be12891a9b51ca800602ee97f03a.exe windows x86
d138b4428074a69c52cd454d3426b9ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
.RIF1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF2 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE