Static task
static1
Behavioral task
behavioral1
Sample
fe5bd6eb5821873f6764341d0d180142e707b00aa0d5b0a04967974c41ed2a22.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fe5bd6eb5821873f6764341d0d180142e707b00aa0d5b0a04967974c41ed2a22.exe
Resource
win10v2004-20220901-en
General
-
Target
fe5bd6eb5821873f6764341d0d180142e707b00aa0d5b0a04967974c41ed2a22
-
Size
495KB
-
MD5
615c8744e7472a9c3bd978626c9aa5c0
-
SHA1
baf0c9a55d1b1f9e81c75aacc6035b62919e0a13
-
SHA256
fe5bd6eb5821873f6764341d0d180142e707b00aa0d5b0a04967974c41ed2a22
-
SHA512
118d7826333d231f03a0f347b777fd6da5d8a1c3dfa9976789326904fca20e556d33e885ed4dc6acd64379df2035fe99097b08a5987082597df35972f441dbe2
-
SSDEEP
12288:jc28CaaAnvbE0Fbk9PFixz7V8UA0N1A1QRfGi5BVvjIYa:gYsv4Voc0ok3e
Malware Config
Signatures
Files
-
fe5bd6eb5821873f6764341d0d180142e707b00aa0d5b0a04967974c41ed2a22.exe windows x86
255353427b5a29818ab60c01295dbdcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHHandleUpdateImage
kernel32
WaitNamedPipeW
GetCurrentProcess
user32
GetProcessWindowStation
Sections
.text Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE