Static task
static1
Behavioral task
behavioral1
Sample
feda2d73dacadd41feeba0397e43fcbc39d567e00c2b68095612b17cff95d41a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
feda2d73dacadd41feeba0397e43fcbc39d567e00c2b68095612b17cff95d41a.exe
Resource
win10v2004-20220812-en
General
-
Target
feda2d73dacadd41feeba0397e43fcbc39d567e00c2b68095612b17cff95d41a
-
Size
56KB
-
MD5
0f3b316e680bb6a32bc8d6a062005fb5
-
SHA1
57da68d7671dd260c02ba75bd988415427303070
-
SHA256
feda2d73dacadd41feeba0397e43fcbc39d567e00c2b68095612b17cff95d41a
-
SHA512
65268b5370febca53ea4bdf729cfb5fa61e4a6e7435263bc74bf75ef73a0ce0a1ea2ce88a7e106a7ade4cdba6149a611b2d12225da166e9175acec4069c7410a
-
SSDEEP
1536:fcucQa9oO6vix06Z+w1SmSH8pZBzobidHiY5uOWoS:kucQA6vi26kiOeBz1dyaS
Malware Config
Signatures
Files
-
feda2d73dacadd41feeba0397e43fcbc39d567e00c2b68095612b17cff95d41a.exe windows x86
ab54d13f6021d13d34acb57c57411e9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomW
NlsResetProcessLocale
WaitCommEvent
Thread32Next
SetUserGeoID
GetExpandedNameW
DebugSetProcessKillOnExit
ReadConsoleOutputA
ReplaceFile
GlobalGetAtomNameW
SetSystemTime
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE