Static task
static1
Behavioral task
behavioral1
Sample
fcca4aacf23abc7a9a901cfaadc67148fa3009c46a6c43005086deca97c93e59.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcca4aacf23abc7a9a901cfaadc67148fa3009c46a6c43005086deca97c93e59.exe
Resource
win10v2004-20220812-en
General
-
Target
fcca4aacf23abc7a9a901cfaadc67148fa3009c46a6c43005086deca97c93e59
-
Size
835KB
-
MD5
512b06ad63c1d52e254b7df6721d1010
-
SHA1
11c81a16353b8541869754c0e2abb2a51cd29373
-
SHA256
fcca4aacf23abc7a9a901cfaadc67148fa3009c46a6c43005086deca97c93e59
-
SHA512
a8437449d433122beb7965e54bccc7ec39a33c0ecaa2c1d19166340900de8eeb658a153aca86e565ce618cf94a89f90270d93249de56100a21f267459f91a056
-
SSDEEP
12288:SmQy/4tNPotdMS3HWmAGbW5qk27RSPeUf7P97GJL9Qx/o79FekPflyM+90kuaC:SmxSep3HJAGC5AfUf7P97c77lHcMy0kK
Malware Config
Signatures
Files
-
fcca4aacf23abc7a9a901cfaadc67148fa3009c46a6c43005086deca97c93e59.exe windows x86
d77469083a16ae101eca9bfb3b36c2a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtWriteRequestData
kernel32
GetCurrentThread
CreatePipe
GetThreadLocale
user32
GetInputDesktop
Sections
.text Size: 828KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE