Static task
static1
Behavioral task
behavioral1
Sample
fa0dba988c5f06aa70bdd00254cf86c601e8a2fccf39c7ff2b186ffadd1b4431.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa0dba988c5f06aa70bdd00254cf86c601e8a2fccf39c7ff2b186ffadd1b4431.exe
Resource
win10v2004-20220812-en
General
-
Target
fa0dba988c5f06aa70bdd00254cf86c601e8a2fccf39c7ff2b186ffadd1b4431
-
Size
34KB
-
MD5
0f879e8e5fdb6ff753562731379a00c0
-
SHA1
b1d4ac1e67b98d33898f536efe7836eb59c4c8f6
-
SHA256
fa0dba988c5f06aa70bdd00254cf86c601e8a2fccf39c7ff2b186ffadd1b4431
-
SHA512
d315afeb0e08f52f7b76a128ae097b434a9d4aa62cf7e568fa07761feebbae1c525407bb7409d78485c3f9be806c6db890a44a0075e3068ed4521f0ed784f7de
-
SSDEEP
768:KUt2D/BAlzrLWntUYKyUm4RbghmdzZ2ZY0A4Wu4Plfao:OClDPfJdgcZ2o42l
Malware Config
Signatures
Files
-
fa0dba988c5f06aa70bdd00254cf86c601e8a2fccf39c7ff2b186ffadd1b4431.exe windows x86
0493264954cd5100c5fa796a7d50d2fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_controlfp
_cexit
_adjust_fdiv
_except_handler3
_XcptFilter
_exit
_c_exit
__setusermatherr
_initterm
__getmainargs
__initenv
_write
strchr
puts
exit
kernel32
FormatMessageA
LocalFree
GetModuleHandleA
GetLastError
user32
CharToOemBuffA
ws2_32
gethostname
WSAStartup
mswsock
s_perror
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kyxbtvm Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE