Static task
static1
Behavioral task
behavioral1
Sample
aff97cf946224befb53b9974e468d3e7d7c251043541a2df144be79718e91d65.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aff97cf946224befb53b9974e468d3e7d7c251043541a2df144be79718e91d65.exe
Resource
win10v2004-20221111-en
General
-
Target
aff97cf946224befb53b9974e468d3e7d7c251043541a2df144be79718e91d65
-
Size
1.2MB
-
MD5
f4500bfc9e0213bfbdfd4cfa06d96d96
-
SHA1
ebe0b656f0bfe2a5ba4c8c927bce1de5e7e0218b
-
SHA256
aff97cf946224befb53b9974e468d3e7d7c251043541a2df144be79718e91d65
-
SHA512
150a2ec355bf3c3a0f51a55da995fead0fea7d2c7e2f8dd97427e0d6f90ec0d082f42509e47908cf4711231ae018f217f5e44ec4898c3e38b49ebb5931e3cfda
-
SSDEEP
24576:J6keeZ0ul2SbasyzqB/8eT4wUB+lVSgln6R3nbNAHfHTr/A4X84BtY1Qli7rAIuS:FZdwSOsyzqBL1UMnl6R3+33d07rhZ
Malware Config
Signatures
Files
-
aff97cf946224befb53b9974e468d3e7d7c251043541a2df144be79718e91d65.exe windows x86
3ce8605f4572d09027ece14b34fde472
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
Sections
Size: 667KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
scdlminm Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcactkot Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE