Static task
static1
Behavioral task
behavioral1
Sample
d2861ec4aa178e606877845362285ba81581290b8ad27e01fb0dce0f88e1011a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d2861ec4aa178e606877845362285ba81581290b8ad27e01fb0dce0f88e1011a.exe
Resource
win10v2004-20220812-en
General
-
Target
d2861ec4aa178e606877845362285ba81581290b8ad27e01fb0dce0f88e1011a
-
Size
1.3MB
-
MD5
80be958e4cc78f5f2f1cd48df744928b
-
SHA1
6cf198c9ff452e46b9af866d1df88d8eb93d8dcf
-
SHA256
d2861ec4aa178e606877845362285ba81581290b8ad27e01fb0dce0f88e1011a
-
SHA512
256a4c338495ac74b3b5a544031cf5a5b3932be69528e14930761a30920d89e670a382ce1c369e9776b00fe8bb8a33f6f88b894dd68cdaba43c440fe759f8fd0
-
SSDEEP
24576:xrY9uiXCZEmH+AoNRx0Dz3QEZ3Ipm8BvQ+F+NWDpYtxrRLdPtNO:jiXC6mHRHQuO1InWDGtxrRJtk
Malware Config
Signatures
Files
-
d2861ec4aa178e606877845362285ba81581290b8ad27e01fb0dce0f88e1011a.exe windows x86
35a9e9974c673669c35cafffdf20e1bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThreadId
Sections
Size: 667KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
evmhkclp Size: 624KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gsrnkgkg Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE