Static task
static1
Behavioral task
behavioral1
Sample
fd4e5c67fb7437fc42ae86d13b3f0855b61f7d6202d973b960c7552d04599635.exe
Resource
win7-20220812-en
General
-
Target
fd4e5c67fb7437fc42ae86d13b3f0855b61f7d6202d973b960c7552d04599635
-
Size
78KB
-
MD5
96c1313bbf2f84959c3c17df0c441870
-
SHA1
cd525e2708baefbcceba1150cab616b276bf692b
-
SHA256
fd4e5c67fb7437fc42ae86d13b3f0855b61f7d6202d973b960c7552d04599635
-
SHA512
1bd332017156363362398fca466b722b14234a54dccfc9c14daee64ccf0fd47a2e3ebf4a3b37582e0238d7f37d10422f1f3ce658777c153afa6614879f3eb963
-
SSDEEP
1536:gfDfhT+pdFar0b12axPM+iT/aVNwptzEUOijJCLK8wRUe+eiGpj4EOijgCuK8:gDhTMi02axU+DVNy4UyKlUKi+4E4K
Malware Config
Signatures
Files
-
fd4e5c67fb7437fc42ae86d13b3f0855b61f7d6202d973b960c7552d04599635.exe windows x86
846ff99b09dfdd42ca19c58e21b4350f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Sections
packerBY Size: - Virtual size: 65KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
00 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
01 Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ