Static task
static1
Behavioral task
behavioral1
Sample
fadfba7e9132fd0a3535a49120ffd9fe8a3158c16748a8e9937760b0524accbe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fadfba7e9132fd0a3535a49120ffd9fe8a3158c16748a8e9937760b0524accbe.exe
Resource
win10v2004-20220812-en
General
-
Target
fadfba7e9132fd0a3535a49120ffd9fe8a3158c16748a8e9937760b0524accbe
-
Size
490KB
-
MD5
6a8d84d37e3e2b75018a9fc20d8da570
-
SHA1
a5a60c3002b0cd1ce9e4c2bfb36a08dba6b58743
-
SHA256
fadfba7e9132fd0a3535a49120ffd9fe8a3158c16748a8e9937760b0524accbe
-
SHA512
66a4db9b92eea74d917fe43e470960f90069a3b3b28a890cee106dca1541696eecc1971ff4b1b8c5a7f15f1b31896d6580cab31d728a0439b27dbcc904541dca
-
SSDEEP
12288:G/bN+YoLeI1Ytd9IZcorjazUDe0amgdO3:GTpPKDgdO3
Malware Config
Signatures
Files
-
fadfba7e9132fd0a3535a49120ffd9fe8a3158c16748a8e9937760b0524accbe.exe windows x86
e7c82b55bf0c51d77784c0c10036c036
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtSetLowEventPair
oleaut32
VarI2FromR8
kernel32
CommConfigDialogA
user32
GetMessageTime
GetCursor
Sections
.text Size: 483KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE