Static task
static1
Behavioral task
behavioral1
Sample
dfef29259364341a9475d0d5008fc3700a76e4aa57e529c823e47a8349318c41.exe
Resource
win7-20220812-en
General
-
Target
dfef29259364341a9475d0d5008fc3700a76e4aa57e529c823e47a8349318c41
-
Size
1.1MB
-
MD5
c2c8c8b30c7424edb560260d88765b78
-
SHA1
5dfe2e9f27884922bacac628c8a160c2b4aef57a
-
SHA256
dfef29259364341a9475d0d5008fc3700a76e4aa57e529c823e47a8349318c41
-
SHA512
a6700c62ecc52ac93486c7160ae03b9b7b3f81b0fef7f8330d3b8171cbb8a49c7deb6b7f893dd3b648951b61263d50462ac443c200ce224230d5b5e3600a952e
-
SSDEEP
24576:YJRACgLoI1NKdK1EPT4p0S/uICN5a7NGMPhwJPN/1amk8rs:dCgLoI/iAIS/uYZZwhamF
Malware Config
Signatures
Files
-
dfef29259364341a9475d0d5008fc3700a76e4aa57e529c823e47a8349318c41.exe windows x86
fa721097ce7bee9a91c5368db3b88ca7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
FreeLibrary
GetLastError
GetLocalTime
GetProcAddress
LoadLibraryW
Sleep
VirtualAlloc
VirtualFree
msvcrt
malloc
free
memcpy
Sections
.text Size: 1004KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ