Static task
static1
Behavioral task
behavioral1
Sample
fadfe5cd1d398dcd74d6b0818257122947b85f33124a190a8c88f59d80e46654.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fadfe5cd1d398dcd74d6b0818257122947b85f33124a190a8c88f59d80e46654.exe
Resource
win10v2004-20220812-en
General
-
Target
fadfe5cd1d398dcd74d6b0818257122947b85f33124a190a8c88f59d80e46654
-
Size
44KB
-
MD5
647d9d3b339484966a26b3370f4e487c
-
SHA1
832de457337558d0b2fe8eb3f86a06183f7169f1
-
SHA256
fadfe5cd1d398dcd74d6b0818257122947b85f33124a190a8c88f59d80e46654
-
SHA512
a14970cf1df8174289467b9d660c2c5b882fac31fba550318bcece22489ec122a6cf4d936fafb658fe9fd4cb10124ab5d1ed4b6f71cbaa4b30ebaea5b1edaa98
-
SSDEEP
768:4rZhBWJveozXzfajyKEOY5JvW5JxVIAA3YjAncYCM:4rZeJW+rKEOwJvW5JvIAA3kAncYB
Malware Config
Signatures
Files
-
fadfe5cd1d398dcd74d6b0818257122947b85f33124a190a8c88f59d80e46654.exe windows x86
9ec394606677b993a75d63be1c995b91
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
olecli32
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
DefCreateInvisible
DefCreateLinkFromClip
DefCreateLinkFromFile
lz32
LZRead
LZOpenFileA
LZOpenFileW
LZStart
msdmo
DMORegister
mscat32
CryptCATCDFClose
CryptCATGetAttrInfo
CryptCATGetAttrInfo
CryptCATGetAttrInfo
kernel32
GetSystemDirectoryA
CreateFileA
TerminateThread
ReadFileEx
GetTickCount
GetTickCount
ReadConsoleW
devmgr
DeviceProblemTextA
esent
JetBeginSession
Sections
tex Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data3 Size: 4KB - Virtual size: 69KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
plk Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
neo Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE