Static task
static1
Behavioral task
behavioral1
Sample
fa1295f16cc20cb22a60ff0d7c05eb8b127dcf486bdb76c99c0cd679245d0809.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa1295f16cc20cb22a60ff0d7c05eb8b127dcf486bdb76c99c0cd679245d0809.exe
Resource
win10v2004-20220812-en
General
-
Target
fa1295f16cc20cb22a60ff0d7c05eb8b127dcf486bdb76c99c0cd679245d0809
-
Size
64KB
-
MD5
51ae32c546210d7e31bd3815085f9f66
-
SHA1
c85b57b8b1cd84670aa5b8716a0119546eed1cfd
-
SHA256
fa1295f16cc20cb22a60ff0d7c05eb8b127dcf486bdb76c99c0cd679245d0809
-
SHA512
589f8a38c080779f62026b7b59fdc7acea2700c6fc3b78d10b5310cc696cd8a84192378c8b7ed3cf35f4e1a17173315963afa687b6c1653998081d34db82cd78
-
SSDEEP
768:/P78m0peYMRkF03U39XZaB+j8Y10QGPL4vzZq2o9W7GsxBbPr:X4m08aaENkB+j8Y1nGCq2iW7z
Malware Config
Signatures
Files
-
fa1295f16cc20cb22a60ff0d7c05eb8b127dcf486bdb76c99c0cd679245d0809.exe windows x86
1ebeceef69939e7408f19e5deaa5fdb8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
lstrlenA
user32
LoadIconA
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
mfc42
ord924
ord1575
ord561
ord815
ord800
ord2818
ord860
ord537
ord1146
ord1168
msvcrt
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
_mbsrchr
__CxxFrameHandler
_snprintf
msvcp60
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�[�ˣu Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE