Static task
static1
Behavioral task
behavioral1
Sample
514ac59bad50eb500348dc72afcea3064a8de977f302160b4f9e950a3344f67b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
514ac59bad50eb500348dc72afcea3064a8de977f302160b4f9e950a3344f67b.exe
Resource
win10v2004-20220812-en
General
-
Target
514ac59bad50eb500348dc72afcea3064a8de977f302160b4f9e950a3344f67b
-
Size
722KB
-
MD5
6120649da29a607beecf807f66c900a3
-
SHA1
7594662e72470b0de804d7f60fcbcc553d79a6b9
-
SHA256
514ac59bad50eb500348dc72afcea3064a8de977f302160b4f9e950a3344f67b
-
SHA512
6c089b72b3e8ae63194278fde253abf49da713b35be496b0ea58b09b7076e68ca6ebb6c01d0222a43a0ab6cf48b0fc484de9842dbf6f614716616eae0831afcc
-
SSDEEP
12288:1aaRrhY8+ttdfix6GzpXafQwbgCXGRQQnbsKR9XDEONdTaxbzk/EK4FRTrVb4TY8:IUMtt3+4YwbgCWalKvXNMpznpRTr94Tv
Malware Config
Signatures
Files
-
514ac59bad50eb500348dc72afcea3064a8de977f302160b4f9e950a3344f67b.exe windows x86
5624dbf5142c088aae5da9911b51171b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryW
Sections
Size: 49KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crfspolx Size: 657KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yuvfahua Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE