Static task
static1
Behavioral task
behavioral1
Sample
feda092b22477258d79f82aa499c769428e5c1e1e646b7b7a86030324f096853.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
feda092b22477258d79f82aa499c769428e5c1e1e646b7b7a86030324f096853.exe
Resource
win10v2004-20220812-en
General
-
Target
feda092b22477258d79f82aa499c769428e5c1e1e646b7b7a86030324f096853
-
Size
144KB
-
MD5
92138880b65ba4534b264d319fd44f20
-
SHA1
1f955bd06b483d5bff8d956f27e9fce2c90f65a0
-
SHA256
feda092b22477258d79f82aa499c769428e5c1e1e646b7b7a86030324f096853
-
SHA512
7935c0b3ca8925d4480127a854f1e04f87251f4f6dc9fc2f2c7b512ac31eae168270a226e46cef65918418bfcab10c271e9b7eaaeb7128dc803d227f08873d0b
-
SSDEEP
3072:A72n1sTg4+d0xT2w3b1UVHs2qmRlixXaKa0qMW2pVol3IFEyKwLR:ACBd0dL16/wguJpVopIh
Malware Config
Signatures
Files
-
feda092b22477258d79f82aa499c769428e5c1e1e646b7b7a86030324f096853.exe windows x86
ec54ba23f66bc25fa7cfe912f555c05d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
DosPathToSessionPathA
GetCommState
CreateIoCompletionPort
GetCalendarInfoW
CloseHandle
GetFileType
SetMailslotInfo
LoadLibraryW
lstrcmpiA
EndUpdateResourceA
EnumLanguageGroupLocalesW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE