Static task
static1
Behavioral task
behavioral1
Sample
f2d8d0c0ab1b992b13c591b4e7b3f8e3c8aa87afca5b707a339747d9986aeed4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2d8d0c0ab1b992b13c591b4e7b3f8e3c8aa87afca5b707a339747d9986aeed4.exe
Resource
win10v2004-20220812-en
General
-
Target
f2d8d0c0ab1b992b13c591b4e7b3f8e3c8aa87afca5b707a339747d9986aeed4
-
Size
218KB
-
MD5
0aa96b2b24f45ee56181b69c782947a0
-
SHA1
ebe6f2880b3f55438e5a4f198470624e69a64c1f
-
SHA256
f2d8d0c0ab1b992b13c591b4e7b3f8e3c8aa87afca5b707a339747d9986aeed4
-
SHA512
7091c2f6f30248d9ad6b4a8f36a4549337d33b946d1738626e7ecd07a4214f5542800e666027b83b6af798c0202b8ede8f643b568cec756d3ef7ea255cf460d3
-
SSDEEP
3072:DWDAqUq1lYDJTMxsGuk08fh2yHSdSDvyaCtHCIu295Fyhc0YjFO4oW654OqXiNhX:DW0LMxLLftSMTAiTo5UdOw4W5OwNr
Malware Config
Signatures
Files
-
f2d8d0c0ab1b992b13c591b4e7b3f8e3c8aa87afca5b707a339747d9986aeed4.exe windows x86
bef51876dbb17a85ea7c43cbdec18701
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
SetTimer
gdi32
BitBlt
advapi32
OpenProcessToken
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
YHFFDERS Size: - Virtual size: 620KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YHFFDERS Size: 217KB - Virtual size: 220KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE