Static task
static1
Behavioral task
behavioral1
Sample
f64ed41b4c790d677b42cfb15d501609c6a3c4d769e9fcccbb9ba51e2e135237.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f64ed41b4c790d677b42cfb15d501609c6a3c4d769e9fcccbb9ba51e2e135237.exe
Resource
win10v2004-20220812-en
General
-
Target
f64ed41b4c790d677b42cfb15d501609c6a3c4d769e9fcccbb9ba51e2e135237
-
Size
725KB
-
MD5
080b826aa20d1af44d0004f3f8dc3420
-
SHA1
fb5bfc73eea105b209b164a2157080be6da6b2e3
-
SHA256
f64ed41b4c790d677b42cfb15d501609c6a3c4d769e9fcccbb9ba51e2e135237
-
SHA512
249927fbf1ef5ac6388920cbcb428ef2bfe5804d94d48e3ba6a15d23cf61f5018f073d2a50c07dc24ecc9548eaaea5a21b737fbe6f23e7f7b8a30673744c4f77
-
SSDEEP
12288:an/FJz6EkQEokBVr4U7VJwy0CgRs/t/hEughoeMqLE0BiTZmy+jt3/K8:an/kQEoDUxCy0i5Eughoe9I08m3x/
Malware Config
Signatures
Files
-
f64ed41b4c790d677b42cfb15d501609c6a3c4d769e9fcccbb9ba51e2e135237.exe windows x86
62a4972b299b858fb607a6ff92bcadb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
IsValidPtrIn
ntdll
RtlInitCodePageTable
RtlxAnsiStringToUnicodeSize
RtlQueryInterfaceMemoryStream
RtlGetElementGenericTable
shell32
DragQueryPoint
kernel32
GetWriteWatch
GetProcessHeap
user32
GetShellWindow
GetKBCodePage
Sections
.text Size: 716KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE