Static task
static1
Behavioral task
behavioral1
Sample
fa32ea12ef4d68db0dcaad4334e67275430b1a86bb86edb6cbad327e3329e6bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa32ea12ef4d68db0dcaad4334e67275430b1a86bb86edb6cbad327e3329e6bc.exe
Resource
win10v2004-20220901-en
General
-
Target
fa32ea12ef4d68db0dcaad4334e67275430b1a86bb86edb6cbad327e3329e6bc
-
Size
320KB
-
MD5
03d7c65f809e5810dc438201be868d00
-
SHA1
b2796855f3116e4affac394d7a23e118f324c9bd
-
SHA256
fa32ea12ef4d68db0dcaad4334e67275430b1a86bb86edb6cbad327e3329e6bc
-
SHA512
c23a2bf25897c988679153052a49c0fc7955a705c01abbcc59aa4a92b5cfc297bf4604e5b4e17de6849c80f23a6c65481ad83bb568ec86d2ed95a76fb45d3c47
-
SSDEEP
6144:s/niCZf8gEjH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:s/iw8ga2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
fa32ea12ef4d68db0dcaad4334e67275430b1a86bb86edb6cbad327e3329e6bc.exe windows x86
88195863ac6122f9383d47bd75c66ffc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
QueryWin31IniFilesMappedToRegistry
TransactNamedPipe
SetStdHandle
ReadConsoleInputW
SetConsoleLocalEUDC
AddRefActCtx
UnlockFile
LZInit
CreateHardLinkA
LockFile
FindFirstFileA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE