Static task
static1
Behavioral task
behavioral1
Sample
72bc98a67b8301792b12fce30b025e0becd3eb6379637324ba904686a4fe8588.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
72bc98a67b8301792b12fce30b025e0becd3eb6379637324ba904686a4fe8588.exe
Resource
win10v2004-20230221-en
General
-
Target
72bc98a67b8301792b12fce30b025e0becd3eb6379637324ba904686a4fe8588
-
Size
3.4MB
-
MD5
b94c906b5b634cc342a113427ae69bdd
-
SHA1
644e4a061e0b9b09903a7780dcbb4ba51d68b304
-
SHA256
72bc98a67b8301792b12fce30b025e0becd3eb6379637324ba904686a4fe8588
-
SHA512
1e9dcc828e30269173d3f573a3d4db38afa03adfa6da7d0939105915fa1c2693f427ff2cac381267f696a7b34be474a5980b36898257243bdd6286f93f0f7362
-
SSDEEP
49152:8Xy/FbGW5GuKnkGBku77hu8dRzsxVVOgf/FNb/mmhevq/u0ptrGrAGXbGv:8i/MrntBH7hl8Lb/mjqBnoGv
Malware Config
Signatures
Files
-
72bc98a67b8301792b12fce30b025e0becd3eb6379637324ba904686a4fe8588.exe windows x86
d5e0355f8764c235b38759b860077ceb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32
MessageBoxA
Sections
.text Size: 2.9MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 404KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kylin9 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE