Static task
static1
Behavioral task
behavioral1
Sample
fa5dc5cd8474e639f48c4c3cf7b4c8a5181c8a5cc0d8a8da0de59cf6d51f0b28.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa5dc5cd8474e639f48c4c3cf7b4c8a5181c8a5cc0d8a8da0de59cf6d51f0b28.exe
Resource
win10v2004-20220812-en
General
-
Target
fa5dc5cd8474e639f48c4c3cf7b4c8a5181c8a5cc0d8a8da0de59cf6d51f0b28
-
Size
337KB
-
MD5
1befec346a82667ca9ab832225c57567
-
SHA1
e6cc0782f815d62f507f3f0396ffa3f0a525c9b1
-
SHA256
fa5dc5cd8474e639f48c4c3cf7b4c8a5181c8a5cc0d8a8da0de59cf6d51f0b28
-
SHA512
9cced55cb4c7b96c0b1e731dc7bece166b851f7de8ce1391005b21ad2d5d790462c64b2716998e2bdcd93a2ad4cf3d2d221a27c50ac3ce1f7ad211f76df4acda
-
SSDEEP
6144:Jn5m5Am3fGgD3HN4ukGjxFdV5zr9IeS2XMpbpACdIkLL/HF:bnm3fGgD3mukSdV5X9NLMRmCf
Malware Config
Signatures
Files
-
fa5dc5cd8474e639f48c4c3cf7b4c8a5181c8a5cc0d8a8da0de59cf6d51f0b28.exe windows x86
b3a3d438cc337614c28109b5fc7574ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
LoadLibraryA
GetProcessHeap
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
RegOpenKeyA
Sections
.text Size: 334KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ