Static task
static1
Behavioral task
behavioral1
Sample
fd82001efdd85d0e604b13203adb854842be24708f6d4aac2c2283f1948fd3e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd82001efdd85d0e604b13203adb854842be24708f6d4aac2c2283f1948fd3e8.exe
Resource
win10v2004-20220812-en
General
-
Target
fd82001efdd85d0e604b13203adb854842be24708f6d4aac2c2283f1948fd3e8
-
Size
75KB
-
MD5
9589e2bce54a9199fa00e5bd758eb6e3
-
SHA1
70323da3d78b1611edbddd1bd6f6c4811aeef52d
-
SHA256
fd82001efdd85d0e604b13203adb854842be24708f6d4aac2c2283f1948fd3e8
-
SHA512
6bff7d6c14e211d1a53bf9807a7a337b9d9c51289c18b7f049e81d5c5cdfdaa80592638761704aa646bc7c42a5e513b815cd164274f93203074a08beea2486c8
-
SSDEEP
1536:isTH4+gEAqeDwgSz+Y4B8b78tpqvmC5vsw8tPpaISS/Xqt:isTHDgEAWV4BVpqvb5Ew8dpzVvqt
Malware Config
Signatures
Files
-
fd82001efdd85d0e604b13203adb854842be24708f6d4aac2c2283f1948fd3e8.exe windows x86
702d24f872cc9471b1d90d13b022045b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetWriteWatch
lstrcmp
MoveFileExA
GetCompressedFileSizeW
SetEnvironmentVariableW
SetEndOfFile
PrivMoveFileIdentityW
IsValidLanguageGroup
AllocateUserPhysicalPages
InitAtomTable
CreateSemaphoreA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 61KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE