Static task
static1
Behavioral task
behavioral1
Sample
0c15a36feeba8611d50d86ce0e6a339294ee5fe90a4051a8bb1534754327f280.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0c15a36feeba8611d50d86ce0e6a339294ee5fe90a4051a8bb1534754327f280.exe
Resource
win10v2004-20230220-en
General
-
Target
0c15a36feeba8611d50d86ce0e6a339294ee5fe90a4051a8bb1534754327f280
-
Size
148KB
-
MD5
7e0b3ad5f3bf237fcdb220c6fa6aa9e5
-
SHA1
c8e791b13709b3865f49e27705abdb0374d744b5
-
SHA256
0c15a36feeba8611d50d86ce0e6a339294ee5fe90a4051a8bb1534754327f280
-
SHA512
cd55e928ea6b8b1557c286e11819ef5124db3bda2b31a1456470d30e538ec141fdbcb4b7541f0534b1a93f7347a51f28d091dba6ae5306e7a832604690fd4f0a
-
SSDEEP
3072:XhalyP1pZUd3921As+d+QRBqOwO4tVQ9kgugfrPlwUq4Ogtn29:XI41p6tSOdRREOwdK9kgukPy14Xt
Malware Config
Signatures
Files
-
0c15a36feeba8611d50d86ce0e6a339294ee5fe90a4051a8bb1534754327f280.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 132KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE