Static task
static1
Behavioral task
behavioral1
Sample
b9e9454c9986cf3651552db9964e775907f583765ff86600c4dca38cc903b628.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9e9454c9986cf3651552db9964e775907f583765ff86600c4dca38cc903b628.exe
Resource
win10v2004-20221111-en
General
-
Target
b9e9454c9986cf3651552db9964e775907f583765ff86600c4dca38cc903b628
-
Size
812KB
-
MD5
5aae47c771c45d9bed59e66b745f880f
-
SHA1
45789af7c458dc2741c162ca53ff86b612147e54
-
SHA256
b9e9454c9986cf3651552db9964e775907f583765ff86600c4dca38cc903b628
-
SHA512
4bd4253e2ecceb69346cbfc249c3a0fa3ef5e1d163361b4ec88192a83620b53b32bf2b9cda44bc38284ffe52671fc299374532f6f93881e0f75382dcc9cd33f9
-
SSDEEP
24576:85RWBVYDVS0kFAzbD3MCU2BjGjHHvmHNu:ORkVIMrQmUjUHuI
Malware Config
Signatures
Files
-
b9e9454c9986cf3651552db9964e775907f583765ff86600c4dca38cc903b628.exe windows x86
3d05135032f86cc84003861744e4f532
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 2.0MB
.idata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ