Static task
static1
Behavioral task
behavioral1
Sample
b595c147f1297642e443bf20aedd8289ffe72e57afd83b06402922740d245a91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b595c147f1297642e443bf20aedd8289ffe72e57afd83b06402922740d245a91.exe
Resource
win10v2004-20221111-en
General
-
Target
b595c147f1297642e443bf20aedd8289ffe72e57afd83b06402922740d245a91
-
Size
316KB
-
MD5
cf8529503a962646d475b450c69d9c1d
-
SHA1
572dad72c96ba8e1062c3c5fe22765c30c5eef65
-
SHA256
b595c147f1297642e443bf20aedd8289ffe72e57afd83b06402922740d245a91
-
SHA512
8fbf57cec76cac2f9d0cc2dd58d4f2275c14cf12a49a2b416814ef98e125b99b18454b9d2d973334ab5f06a95be254a6c61f7b4dd4c33fb80bfc71e18d9a7ffd
-
SSDEEP
6144:egwZ5wEqhg8VjLpVuoWYiSEQoa59SNNOfHmZNTz3W02e3pKjbP4D4/:7Y50rVZmlC9S/6GZtz3LMvgk
Malware Config
Signatures
Files
-
b595c147f1297642e443bf20aedd8289ffe72e57afd83b06402922740d245a91.exe windows x86
eaf1480919b7ed8bd1ccf1ea3c7be57f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
kernel32
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Sections
.text Size: - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ