Static task
static1
Behavioral task
behavioral1
Sample
faf585d69df0b3c00b098f5f30223b5598ec53b39f4349321cc7284a6fbdacbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
faf585d69df0b3c00b098f5f30223b5598ec53b39f4349321cc7284a6fbdacbf.exe
Resource
win10v2004-20220812-en
General
-
Target
faf585d69df0b3c00b098f5f30223b5598ec53b39f4349321cc7284a6fbdacbf
-
Size
320KB
-
MD5
a0de7b0eb4704bd0f66db0769e5c4080
-
SHA1
53ac3066a463b06c8874083f7e5de9d876024a60
-
SHA256
faf585d69df0b3c00b098f5f30223b5598ec53b39f4349321cc7284a6fbdacbf
-
SHA512
d6ff7af1cfd5c0174129268b64558ca012337f7a801689ddb87920e93c28f1ced3db466f765462358466d17b80ac958e15fe0402ec3a3d56920d00a934581e4a
-
SSDEEP
6144:KCewdeX2nlvH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:y8Llf2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
faf585d69df0b3c00b098f5f30223b5598ec53b39f4349321cc7284a6fbdacbf.exe windows x86
8b89e7176ce16aa38a4e61cd233aed68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreatePipe
AreFileApisANSI
InitializeCriticalSection
HeapSetInformation
GetDevicePowerState
CreateMailslotA
UTRegister
ExtendVirtualBuffer
NlsGetCacheUpdateCount
RegisterWowBaseHandlers
SetEnvironmentVariableW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE