Static task
static1
Behavioral task
behavioral1
Sample
fedfa16f866bd2a1814c36f663c4b7c5808852d086b03d379a029e4ce24bc10f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fedfa16f866bd2a1814c36f663c4b7c5808852d086b03d379a029e4ce24bc10f.exe
Resource
win10v2004-20220812-en
General
-
Target
fedfa16f866bd2a1814c36f663c4b7c5808852d086b03d379a029e4ce24bc10f
-
Size
320KB
-
MD5
14ce616fc67dfbded7914b9a99720df0
-
SHA1
77e84d35e6fb1044fb615b0b2f68ce9658286168
-
SHA256
fedfa16f866bd2a1814c36f663c4b7c5808852d086b03d379a029e4ce24bc10f
-
SHA512
c46c2fbf6c17add4d07f0a79dc9996f46e164ae2ad264cb638bcfb153490986c84b15e6b44f349c398b171e61bd980c895677e4eeec6b6d2f5345844d8db4c37
-
SSDEEP
6144:4zxQDULCNH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:4xrLCt2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
fedfa16f866bd2a1814c36f663c4b7c5808852d086b03d379a029e4ce24bc10f.exe windows x86
6a3d23a1149c063ab9f70125ffe5aaa4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
CreateDirectoryExW
ResetEvent
SetTimeZoneInformation
VerifyVersionInfoA
GetSystemTimes
EnumResourceNamesA
GetLinguistLangSize
CreateThread
GetConsoleAliasExesW
GetTimeFormatW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE