?1l99765@@YGXKPAUHBRUSH__@FD0
Static task
static1
Behavioral task
behavioral1
Sample
fda435fb6d0a95b97b296ba4d9682b3538195920dc80b575766f64dc86a5ed31.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fda435fb6d0a95b97b296ba4d9682b3538195920dc80b575766f64dc86a5ed31.exe
Resource
win10v2004-20220812-en
General
-
Target
fda435fb6d0a95b97b296ba4d9682b3538195920dc80b575766f64dc86a5ed31
-
Size
76KB
-
MD5
443ca59897cc4c62da5542a01f77e130
-
SHA1
7551b1b37ccd3e6ac451542a0c76abb7ea22dd09
-
SHA256
fda435fb6d0a95b97b296ba4d9682b3538195920dc80b575766f64dc86a5ed31
-
SHA512
b018650c8484bb06eaae848940c627f0e6ed8281ceace7528db9efae2e1a731a2f7daed0c5e0e496344c975ad128ec60fd015b8cc23344678a501ddcdd961b22
-
SSDEEP
1536:6x/TpwmghyxC1NKEI3C9KDsvkRBGGLbc8XcSorJyFtcC0W83bMl:g/TpvK+CqRVTMVr0tGOl
Malware Config
Signatures
Files
-
fda435fb6d0a95b97b296ba4d9682b3538195920dc80b575766f64dc86a5ed31.exe windows x86
7a292720281656b894b09d92bf0bfe59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlIsW
PathIsLFNFileSpecA
PathIsRootW
PathIsSameRootA
kernel32
GetProfileSectionW
GetVersionExA
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mem21 Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mem09 Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mem87 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ