Static task
static1
Behavioral task
behavioral1
Sample
fafdf4f567829c07c4450eedcc824c4e5e88c32f70415397afa10b5ee1797d0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fafdf4f567829c07c4450eedcc824c4e5e88c32f70415397afa10b5ee1797d0c.exe
Resource
win10v2004-20220812-en
General
-
Target
fafdf4f567829c07c4450eedcc824c4e5e88c32f70415397afa10b5ee1797d0c
-
Size
32KB
-
MD5
8074d7e2e79ad077514677f423912910
-
SHA1
a1472f559008e6292a2063337486e50b6b269ec9
-
SHA256
fafdf4f567829c07c4450eedcc824c4e5e88c32f70415397afa10b5ee1797d0c
-
SHA512
f9b27d07f9b27aa28025ba6e25261d7ebfe2656ff39ee8791251a18116764f2a2b75659d0240a52b5d1d0ebb495509d589273a48ac43212030146d1c50f194e7
-
SSDEEP
768:mqJkziGHFX+zO7pCKDBWuPSKgPngrdLk85YKjQ:PKFXNZBWuPZgPnmR5YCQ
Malware Config
Signatures
Files
-
fafdf4f567829c07c4450eedcc824c4e5e88c32f70415397afa10b5ee1797d0c.exe windows x86
173fcd87b802ee1569d4cdca785c0359
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyIcon
AdjustWindowRectEx
IsCharUpperA
kernel32
GetLastError
VirtualProtect
CreateTimerQueue
gdi32
EngCheckAbort
comdlg32
ChooseFontA
ReplaceTextW
dwLBSubclass
GetSaveFileNameA
Sections
.text Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE