Static task
static1
Behavioral task
behavioral1
Sample
fe6d5add9ba92b06833c4c33bab049a4d8fc9c0fca55316a2508ff2ab4a59825.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe6d5add9ba92b06833c4c33bab049a4d8fc9c0fca55316a2508ff2ab4a59825.exe
Resource
win10v2004-20220812-en
General
-
Target
fe6d5add9ba92b06833c4c33bab049a4d8fc9c0fca55316a2508ff2ab4a59825
-
Size
928KB
-
MD5
b6f9bc96cd81b72388a6430c65b2d976
-
SHA1
187d3eb62671e22cc21870562313f53d683c3605
-
SHA256
fe6d5add9ba92b06833c4c33bab049a4d8fc9c0fca55316a2508ff2ab4a59825
-
SHA512
18370c7e31d29bbfaa43968640e6c4fe866e450815993f59dd50c26b76394c848a61267bba84b2e59cb701277280903ee11b020466ec495d701d15ddaf502b41
-
SSDEEP
24576:KHbImy0UhUSmUFG1HMS4+Spg1XX7WcGcs0VHU:AlymLt1HMqSpg1X7WrcVHU
Malware Config
Signatures
Files
-
fe6d5add9ba92b06833c4c33bab049a4d8fc9c0fca55316a2508ff2ab4a59825.exe windows x86
32c5de998b5f069b26c94c8143b13c06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 137KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 718KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ