Static task
static1
Behavioral task
behavioral1
Sample
fa587739cd100217ad8237008479e8b27826b6384dd5acc338753af2790026ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa587739cd100217ad8237008479e8b27826b6384dd5acc338753af2790026ee.exe
Resource
win10v2004-20221111-en
General
-
Target
fa587739cd100217ad8237008479e8b27826b6384dd5acc338753af2790026ee
-
Size
857KB
-
MD5
0a0ac38cb6945a87873eb043a1fa1340
-
SHA1
8b5fd9ef3b65da8b0b26a2dffcc550f49edb45fe
-
SHA256
fa587739cd100217ad8237008479e8b27826b6384dd5acc338753af2790026ee
-
SHA512
1e19ff3c25ec3e1901e13f838d99ec51ea627f196d3998f44bce0bb4cc9c322eaf095358e200079c4f1b90ba13592dd86f23141a2e49af643d25ba85ea096f57
-
SSDEEP
24576:aZmzHY2E0GmJBEs41omt0q8Fev48djbAZgN:iEEAn/OogtdXmgN
Malware Config
Signatures
Files
-
fa587739cd100217ad8237008479e8b27826b6384dd5acc338753af2790026ee.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 35KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tlykigwc Size: 802KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ectiecnv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE