Static task
static1
Behavioral task
behavioral1
Sample
94bc9af3b0d4398969e8e2482534a05fa539493d237f83a6b9b7e797527934a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94bc9af3b0d4398969e8e2482534a05fa539493d237f83a6b9b7e797527934a7.exe
Resource
win10v2004-20221111-en
General
-
Target
94bc9af3b0d4398969e8e2482534a05fa539493d237f83a6b9b7e797527934a7
-
Size
452KB
-
MD5
086afbb7d27e33e8198d7d9fc5b5c568
-
SHA1
125d41df328841cd761f4d584d685cda12283e3a
-
SHA256
94bc9af3b0d4398969e8e2482534a05fa539493d237f83a6b9b7e797527934a7
-
SHA512
66bd3c4c5f34d64ed95172ecd680311490866b9b2b57c19477accd19d3a8c090f24b25defb9b332cc8f4673bc832ea6c0fbf84d1ff6431681acc30bb2709bc24
-
SSDEEP
12288:2gEqNX2myTMVcK8fZpkHd5IVDsn/8opQT7ncew4:1EQ2RTqcK8B0ktg8AQnnJw4
Malware Config
Signatures
Files
-
94bc9af3b0d4398969e8e2482534a05fa539493d237f83a6b9b7e797527934a7.exe windows x86
b74f9a5cbb87737a327f276aa6006b3c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ispunct
sscanf
strcspn
strncmp
strrchr
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tlss Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 512B - Virtual size: 147B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE