Static task
static1
Behavioral task
behavioral1
Sample
fdab3284158a782c7015e683b9c85d790355214751424d43103204b1d5cef873.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fdab3284158a782c7015e683b9c85d790355214751424d43103204b1d5cef873.exe
Resource
win10v2004-20220812-en
General
-
Target
fdab3284158a782c7015e683b9c85d790355214751424d43103204b1d5cef873
-
Size
442KB
-
MD5
4730e75a627a958d23f5d2655c8f9390
-
SHA1
aee0856dae923802f1a68b944074a4ef353f2c12
-
SHA256
fdab3284158a782c7015e683b9c85d790355214751424d43103204b1d5cef873
-
SHA512
ff2557ffbfaa57be5bc7747f594dbdd2c9495fb9c8c1f2a9296122a719143a72e1875c251100ec5e8dc72e07b7cfbed74b43d9aa8cdc70c5b83816c22ccaaf3f
-
SSDEEP
12288:tnFhr1+h0UjqVwt/46lchIbayBNOJAgYQ:JFDS0iqVwiS+INOJAc
Malware Config
Signatures
Files
-
fdab3284158a782c7015e683b9c85d790355214751424d43103204b1d5cef873.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nkh Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE