Static task
static1
Behavioral task
behavioral1
Sample
0fb32ad6609f858e16c5b04adc3772f963cde334e87a2d1b47d490bdc2939785.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0fb32ad6609f858e16c5b04adc3772f963cde334e87a2d1b47d490bdc2939785.exe
Resource
win10v2004-20220901-en
General
-
Target
0fb32ad6609f858e16c5b04adc3772f963cde334e87a2d1b47d490bdc2939785
-
Size
564KB
-
MD5
849a7e06ab252c16dfb3c54d5e821690
-
SHA1
a0dc331b2643c62c5c390d5f81a8652cd186dd98
-
SHA256
0fb32ad6609f858e16c5b04adc3772f963cde334e87a2d1b47d490bdc2939785
-
SHA512
5483a1e45679aac32488bfc3ca826076e920cc616e369076fbae20eb87e76c2b7f14a9fc271841e9bec6c298faac61e10f6612fedf964133183f2ad507a8adc3
-
SSDEEP
3072:mpBFuR0kqXojNixy3NqDN35PtfH2qPW9W0:m7FuR0kqX+kxy+vlAW0
Malware Config
Signatures
Files
-
0fb32ad6609f858e16c5b04adc3772f963cde334e87a2d1b47d490bdc2939785.exe windows x86
7632cabde3f761c188438c70154a7353
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
FindFirstFileA
GetVersion
ReadProcessMemory
GetCurrentProcess
GetModuleHandleA
FindClose
user32
DispatchMessageA
TranslateMessage
GetMessageA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7v5na Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE