Static task
static1
Behavioral task
behavioral1
Sample
5fac647b5a4bf484838e0e00f40db252d1da3a8c6e5c8c9843c219eb2c90ef6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5fac647b5a4bf484838e0e00f40db252d1da3a8c6e5c8c9843c219eb2c90ef6f.exe
Resource
win10v2004-20220901-en
General
-
Target
5fac647b5a4bf484838e0e00f40db252d1da3a8c6e5c8c9843c219eb2c90ef6f
-
Size
866KB
-
MD5
24e8071ecf5c1674bb5d27237fb79a16
-
SHA1
acccab3d7e8e5fe98267f3b84c0b2cb38f8d5b50
-
SHA256
5fac647b5a4bf484838e0e00f40db252d1da3a8c6e5c8c9843c219eb2c90ef6f
-
SHA512
d8b91706b1f636b0336644501428963a1d9ee660bf6975523ed0de8bff6b918fb7b89b814c4efebdf20039cf27b65bcdd23a0bfbf63308a085b18b4902a621d8
-
SSDEEP
24576:bRF2i9uZvK+IdpAmdDiIP/3RUVoFtzHZ0:KioK+7UvP/RxR0
Malware Config
Signatures
Files
-
5fac647b5a4bf484838e0e00f40db252d1da3a8c6e5c8c9843c219eb2c90ef6f.exe windows x86
a84778a8b00c63b373199d952f645072
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
msvcrt
_itow
_itoa
_loaddll
_unloaddll
_atoi64
kernel32
GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
Sections
.text Size: 350KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trash Size: 507KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ