Static task
static1
Behavioral task
behavioral1
Sample
aa9856497e3b8b8baabe5bec8f335a739f5fdeb04a1b9912c901e5087973c762.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aa9856497e3b8b8baabe5bec8f335a739f5fdeb04a1b9912c901e5087973c762.exe
Resource
win10v2004-20220812-en
General
-
Target
aa9856497e3b8b8baabe5bec8f335a739f5fdeb04a1b9912c901e5087973c762
-
Size
210KB
-
MD5
152ba08a357ea007aa5a92458875a41c
-
SHA1
46c14da332cabe3f7e4d28959bae2d97eebeb3b0
-
SHA256
aa9856497e3b8b8baabe5bec8f335a739f5fdeb04a1b9912c901e5087973c762
-
SHA512
5f9cddb795ed5ba8f1595dee17c7126199cd5b585c3ae6d92b0d26300247bb02ca9094caa3bc5f0b028b405db98022a6b0ea9d3f9ef12d807e88d12a6d0ffbb1
-
SSDEEP
6144:4k22TB2mH9NnAdN3cm6VWDMuNicvsBN39:K2t2mH9NnAd1AVbucP39
Malware Config
Signatures
Files
-
aa9856497e3b8b8baabe5bec8f335a739f5fdeb04a1b9912c901e5087973c762.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 201KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE