Static task
static1
Behavioral task
behavioral1
Sample
faaf44b108afc3b7dd4d4400b4894a6514009808e3df5aac6e55c8a2a2d0bf70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
faaf44b108afc3b7dd4d4400b4894a6514009808e3df5aac6e55c8a2a2d0bf70.exe
Resource
win10v2004-20220901-en
General
-
Target
faaf44b108afc3b7dd4d4400b4894a6514009808e3df5aac6e55c8a2a2d0bf70
-
Size
1.3MB
-
MD5
6e5ddd08afd4bfef38ef2d5bdb6852d7
-
SHA1
44d353d1b62ab7014f3f7d3693745f59297d4640
-
SHA256
faaf44b108afc3b7dd4d4400b4894a6514009808e3df5aac6e55c8a2a2d0bf70
-
SHA512
765c02103f4bb116b0a4d7eb8059ba37b560c93144c218c2648af4229d758a3311ef8c095837e135cb6e8712267d354c81c8b794f22fcee7680fbcabd1166e80
-
SSDEEP
1536:mXTSHQ+AWwXpPhttIf1zwQVgv/qflVkSkwNegiYaZ:mjG4pPhLI1zwLv/2IfwNegin
Malware Config
Signatures
Files
-
faaf44b108afc3b7dd4d4400b4894a6514009808e3df5aac6e55c8a2a2d0bf70.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE