Static task
static1
Behavioral task
behavioral1
Sample
0fa5c76b486a48e1be1b537b086f646b4dbbe7ec8f3e651f1f5319e14349de50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0fa5c76b486a48e1be1b537b086f646b4dbbe7ec8f3e651f1f5319e14349de50.exe
Resource
win10v2004-20220812-en
General
-
Target
0fa5c76b486a48e1be1b537b086f646b4dbbe7ec8f3e651f1f5319e14349de50
-
Size
931KB
-
MD5
773f880d388fe6b05c03b49288a97f29
-
SHA1
9428c2ddc28f0006029d023d64c99d578606f054
-
SHA256
0fa5c76b486a48e1be1b537b086f646b4dbbe7ec8f3e651f1f5319e14349de50
-
SHA512
457a5fb819373951f08c1b825f2d531cabb97812826d3082f4aae5bcaa8b864d4d961c749af67e0667a074d1f903907a5a362485d55c20ecde379b00c86611df
-
SSDEEP
24576:G273Sdg2YGQjQ0iKJxwg9LIm8WxLW/wBv/tnRztXKm:G2DZGQjQ0xwMsgv/tRlKm
Malware Config
Signatures
Files
-
0fa5c76b486a48e1be1b537b086f646b4dbbe7ec8f3e651f1f5319e14349de50.exe windows x86
0b89a9e1be0227c71560b4e2174cbe59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winmm
mmioClose
mmioOpenA
kernel32
GetProcAddress
VirtualAlloc
LoadLibraryA
user32
GetMessageW
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 914KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ