Static task
static1
Behavioral task
behavioral1
Sample
ba04f9670aac39dda637b6d64dbfbe3a32c39478335015abbc23fcd4ec68c080.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba04f9670aac39dda637b6d64dbfbe3a32c39478335015abbc23fcd4ec68c080.exe
Resource
win10v2004-20221111-en
General
-
Target
ba04f9670aac39dda637b6d64dbfbe3a32c39478335015abbc23fcd4ec68c080
-
Size
319KB
-
MD5
af50e67a2f7b3432c7e99f8534cb8ca3
-
SHA1
b1ed67a2188cee102be8c30de312b4b878dbe1c5
-
SHA256
ba04f9670aac39dda637b6d64dbfbe3a32c39478335015abbc23fcd4ec68c080
-
SHA512
9049b0f17e5ea128a82962d645d61019438a53622915f2546037fb649e2b6c485dab891a28102f49fbc39d8fc8b0aa40526e4bda5d31788922a676c44a3e9e91
-
SSDEEP
6144:hIffcsz32oBK5zk96nX0FNgAVBc6lbdEW8EYuRin3ee++0Wu9v6mBbbs:xc2QqnkXgaf3YuQnVBkBvs
Malware Config
Signatures
Files
-
ba04f9670aac39dda637b6d64dbfbe3a32c39478335015abbc23fcd4ec68c080.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 41KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE