Static task
static1
Behavioral task
behavioral1
Sample
fe996a45cc70ea63837c884dad22a72bce85a21d8a446a51c17de691d3f6f33f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe996a45cc70ea63837c884dad22a72bce85a21d8a446a51c17de691d3f6f33f.exe
Resource
win10v2004-20221111-en
General
-
Target
fe996a45cc70ea63837c884dad22a72bce85a21d8a446a51c17de691d3f6f33f
-
Size
20KB
-
MD5
198e77ee4ce534c834de8be0918f6830
-
SHA1
3bbf30364a2f876160a454b7d9f93383ac839745
-
SHA256
fe996a45cc70ea63837c884dad22a72bce85a21d8a446a51c17de691d3f6f33f
-
SHA512
6395c29eebb4068934ab11886fa5a293878a0bf603b123f55b778eeb6a288f59bb823575e1c392d024a680b97f054036e2abf3c24032149b0192f52614129599
-
SSDEEP
384:qkTBWEyWWEv9E4khk9nPWlcwu8VR/izSnYBnOygO4OhUEciyp:Nyt4kycuSnJlOJc
Malware Config
Signatures
Files
-
fe996a45cc70ea63837c884dad22a72bce85a21d8a446a51c17de691d3f6f33f.exe windows x86
f4bb95a2ed29767e199a8a83e34ea89d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
user32
FindWindowW
PostMessageW
shell32
SHLoadInProc
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE