Static task
static1
Behavioral task
behavioral1
Sample
fb3aa3254a25e221625346929ae5307a224863c6560d29693f4fcee266ccc83b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb3aa3254a25e221625346929ae5307a224863c6560d29693f4fcee266ccc83b.exe
Resource
win10v2004-20220812-en
General
-
Target
fb3aa3254a25e221625346929ae5307a224863c6560d29693f4fcee266ccc83b
-
Size
992KB
-
MD5
4cc0d198b792184cbf840e169a5e5fa0
-
SHA1
a0783ec7fd164e5660a2854a8b3375f165bb67da
-
SHA256
fb3aa3254a25e221625346929ae5307a224863c6560d29693f4fcee266ccc83b
-
SHA512
6a5590891594af32df71fd39b63134eff0431302189d9855f366d9e038535ab2d4ecb20624d68e7e8201e239bf65052e8c352cec9f8207bd05e32cf563e2e465
-
SSDEEP
24576:w8IBB5SFWRm1YWjqPzJ1yBmozfjsRCPhm3Xf:w8MB5VA1A7Ja7+CPhWXf
Malware Config
Signatures
Files
-
fb3aa3254a25e221625346929ae5307a224863c6560d29693f4fcee266ccc83b.exe windows x86
c9700d719552dc5e4340b4872b1490d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Toolhelp32ReadProcessMemory
GetUserDefaultUILanguage
ntdll
NtQueryEvent
user32
GetMessageTime
Sections
.text Size: 985KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE