Static task
static1
Behavioral task
behavioral1
Sample
95db067dcfb36f8c4435f6cb6d3638fe2e97be79906ef8689d3e4a4c778bc792.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95db067dcfb36f8c4435f6cb6d3638fe2e97be79906ef8689d3e4a4c778bc792.exe
Resource
win10v2004-20221111-en
General
-
Target
95db067dcfb36f8c4435f6cb6d3638fe2e97be79906ef8689d3e4a4c778bc792
-
Size
471KB
-
MD5
211924ca89c9276baf3c534e0e8f536d
-
SHA1
af62bbe2256572efd6e0d4c8b067bc002c430683
-
SHA256
95db067dcfb36f8c4435f6cb6d3638fe2e97be79906ef8689d3e4a4c778bc792
-
SHA512
797b6d7e334597c220a8ebcc7e5ea8aef298fc8335c059dba39ae41cb4e914698831ecc353ad3160bfc01a7165cebe8b0666f4386f72706a258e46c8b5c08a35
-
SSDEEP
12288:9i2f283RCQcOb6K0PE0ExXuZGNDF7FgCJT2x:42PRCQ5iEVp1lTu
Malware Config
Signatures
Files
-
95db067dcfb36f8c4435f6cb6d3638fe2e97be79906ef8689d3e4a4c778bc792.exe windows x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteFileA
Sections
CKVF Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DRFY Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JKD Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iYRUF Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CKD Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rZBVF Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rLBPF Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rAQW Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CSO Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aOFRD Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE