Static task
static1
Behavioral task
behavioral1
Sample
5faf7346ab1a1aaa8727cfffde8186d42d241a9713bbb61b7ef9c842e7175e02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5faf7346ab1a1aaa8727cfffde8186d42d241a9713bbb61b7ef9c842e7175e02.exe
Resource
win10v2004-20220812-en
General
-
Target
5faf7346ab1a1aaa8727cfffde8186d42d241a9713bbb61b7ef9c842e7175e02
-
Size
56KB
-
MD5
02dc561454a28211bb9d9945c3d44208
-
SHA1
d5a1e753c669d1f2c04f058c0d2e7b4eddeec859
-
SHA256
5faf7346ab1a1aaa8727cfffde8186d42d241a9713bbb61b7ef9c842e7175e02
-
SHA512
42b0177b007ca0d1861333a0c2b6be15fa66ba155831188eadeb44e6e6a9c67c4a00175496739b687f808821fd80526b5763905916e240f44ed0a26b8ffe7dd5
-
SSDEEP
1536:wldzj0oDlTgMOfeRL/YaJhIlQqkoUDD8zZgFZI:wldn76MOfkBexeFZI
Malware Config
Signatures
Files
-
5faf7346ab1a1aaa8727cfffde8186d42d241a9713bbb61b7ef9c842e7175e02.exe windows x86
4629f01d602b0beedb83876c5836fa7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomA
RtlCaptureStackBackTrace
DefineDosDeviceW
IsBadStringPtrW
InterlockedPopEntrySList
WriteConsoleInputVDMW
EnumResourceNamesA
PeekConsoleInputA
SetEvent
ExitThread
BaseCheckAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE