Static task
static1
Behavioral task
behavioral1
Sample
bef35d7bd81ad12f5b7b2086ca588860b3dfc315f1e4788cf54f3d476ec9fce3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bef35d7bd81ad12f5b7b2086ca588860b3dfc315f1e4788cf54f3d476ec9fce3.exe
Resource
win10v2004-20221111-en
General
-
Target
bef35d7bd81ad12f5b7b2086ca588860b3dfc315f1e4788cf54f3d476ec9fce3
-
Size
281KB
-
MD5
d6f996751e4463d6390dde3f9aa9d296
-
SHA1
14bd69a46bf8a460e43727ce71f8fbc45e28d424
-
SHA256
bef35d7bd81ad12f5b7b2086ca588860b3dfc315f1e4788cf54f3d476ec9fce3
-
SHA512
b1c6a0d647290dd9c30f3ee653a92877c94af8ad4bd501c33f305e7f3120c918a69c54b5cd3fa9e86598b561a27d10fedfa514d828a30aeb54f47c467506a21d
-
SSDEEP
6144:cVjWNhaCzqbAjB9J6PoK5ulgydXfU2Trlzctk:cVjWPzTB9UPrryxLZ
Malware Config
Signatures
Files
-
bef35d7bd81ad12f5b7b2086ca588860b3dfc315f1e4788cf54f3d476ec9fce3.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 253KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE