Static task
static1
Behavioral task
behavioral1
Sample
086b9ec1c66f10aad8b9ad4690a814332bb2138c331ee015d036da5e5035666c.exe
Resource
win7-20230220-en
General
-
Target
086b9ec1c66f10aad8b9ad4690a814332bb2138c331ee015d036da5e5035666c
-
Size
2.7MB
-
MD5
5e6097c903cfe75de8e2b58a40102f23
-
SHA1
003cbfe72113f9a0105df10608e23ce3f9a19338
-
SHA256
086b9ec1c66f10aad8b9ad4690a814332bb2138c331ee015d036da5e5035666c
-
SHA512
6bafe7043ab871bbfa3fc4bd55656d6644b0d587e867e3ae362d798753eb1ef02aa25b9b46b256ff65867c04d36a596a09b21e89517e30deefd7867a922ba558
-
SSDEEP
49152:mQ1lkJuudEJybHZFYmh/y4tlh1n7TqTpo:wduyzZFLh7nn72lo
Malware Config
Signatures
Files
-
086b9ec1c66f10aad8b9ad4690a814332bb2138c331ee015d036da5e5035666c.exe windows x64
0f160c1ce25c742b64d1ff7859ae3f1f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
msvcrt
___lc_codepage_func
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegSetValueExA
shell32
SHGetFolderPathW
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ