Static task
static1
Behavioral task
behavioral1
Sample
f91f5fd8806dcfc4744f1641562e49ca78454a430ab025790112f3f59cfd6ba0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f91f5fd8806dcfc4744f1641562e49ca78454a430ab025790112f3f59cfd6ba0.exe
Resource
win10v2004-20220812-en
General
-
Target
f91f5fd8806dcfc4744f1641562e49ca78454a430ab025790112f3f59cfd6ba0
-
Size
586KB
-
MD5
141b025ad36bcef378b8d781aa011ed0
-
SHA1
6aaee9d7c49b12492c3a855d010b76ffa8875fc8
-
SHA256
f91f5fd8806dcfc4744f1641562e49ca78454a430ab025790112f3f59cfd6ba0
-
SHA512
84cbb5aad6bad4adda40247f45272c443f3d20062bb0d68ca1d7a81fa417cd66f9b71a76238e6f4db0b70f4ba65d99944997f59bbecddcac3af655b4d5f5927d
-
SSDEEP
12288:mEtDt+QFAYvL7+3uhyMNfAsLfozPCOZ/5hNeGX9UZPTjOpMZaBY/x4b7:LTdvvdBfAXTBhqt4MZaB3
Malware Config
Signatures
Files
-
f91f5fd8806dcfc4744f1641562e49ca78454a430ab025790112f3f59cfd6ba0.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 553KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE