Static task
static1
Behavioral task
behavioral1
Sample
00da37a32d4e3d24c7d4454de084ad6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00da37a32d4e3d24c7d4454de084ad6e.exe
Resource
win10v2004-20221111-en
General
-
Target
00da37a32d4e3d24c7d4454de084ad6e.exe
-
Size
5.7MB
-
MD5
00da37a32d4e3d24c7d4454de084ad6e
-
SHA1
5fca1bbc06b994376e444f1f741c2202d5c2227b
-
SHA256
5280df289219b64295e97b3b94e61b34e93a2fa9796067a447b7695499711e97
-
SHA512
f317b7a8b82bdd0d5bae04f4623bb996b44a9cde6e51e7122acdb964a5bb9bb9c9ae18c0ca472df2a1c195137504dfaf00799a071f393cd3bbb7e4a604ec1377
-
SSDEEP
98304:7dVcW6I6X3RIi7rgTFVcRn4qGn+lPjQ6fNiBECYATTIB0ltbfQ:Do7Ci7wVwPGn+1sFmCYATjlZf
Malware Config
Signatures
Files
-
00da37a32d4e3d24c7d4454de084ad6e.exe.exe windows x64
e6e148bd91c4949cacab9cf39cd0d6e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGGGASUP Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MZLDNWN^ Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YQVWLC(O Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Q&GP#XUC Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AAAHZ(NN Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
QI*AAAS^ Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
LL#LHEB# Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OJ*DJAOF Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
&T(W^RF( Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PHCN^CXQ Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ