Static task
static1
Behavioral task
behavioral1
Sample
f0dab3cf648c0f19b4eb627ca8344bac6a710f6a457c5c5f1379526b16e39140.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0dab3cf648c0f19b4eb627ca8344bac6a710f6a457c5c5f1379526b16e39140.exe
Resource
win10v2004-20220812-en
General
-
Target
f0dab3cf648c0f19b4eb627ca8344bac6a710f6a457c5c5f1379526b16e39140
-
Size
256KB
-
MD5
6435f99d524343894b0aef885f74f4ec
-
SHA1
9fef578d3c366fa557e79d861eddfc123be67f1d
-
SHA256
f0dab3cf648c0f19b4eb627ca8344bac6a710f6a457c5c5f1379526b16e39140
-
SHA512
0d8b8cd4c9a1536a72045d7504173f2e79236dd82739f1612b31e778dbe079e17474cb32456c8b2d0081ba2b5a7ffa26d68f99a947fc23bfb9f8f4663f839350
-
SSDEEP
6144:FAZxJrfB3+pM5aIOqLVJ5bbZXegqw48gyH0YtnbvK/kFZj:FixJrp3/alWJtbZU8JFtrymB
Malware Config
Signatures
Files
-
f0dab3cf648c0f19b4eb627ca8344bac6a710f6a457c5c5f1379526b16e39140.exe windows x86
01e647ad754dc303376de7a8b99f14d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
nspr4
PR_GetLibraryFilePathname
PR_smprintf
PR_smprintf_free
PR_FindSymbolAndLibrary
PR_SetEnv
PR_Free
PR_LoadLibraryWithFlags
PR_FindSymbol
PR_UnloadLibrary
PR_GetEnv
plc4
PL_strrchr
kernel32
SetCurrentDirectoryA
GetModuleFileNameA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__set_app_type
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_except_handler3
_controlfp
_initterm
free
??3@YAXPAX@Z
strcmp
??2@YAPAXI@Z
printf
_stat
sprintf
malloc
strlen
memset
_fullpath
strcpy
fclose
strncmp
fgets
fopen
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
;f� Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE