Static task
static1
Behavioral task
behavioral1
Sample
2f3e664a0aee652b81e65d2314945140523667bf88909c0a7f6901740dd92e6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f3e664a0aee652b81e65d2314945140523667bf88909c0a7f6901740dd92e6d.exe
Resource
win10v2004-20220812-en
General
-
Target
2f3e664a0aee652b81e65d2314945140523667bf88909c0a7f6901740dd92e6d
-
Size
60KB
-
MD5
673257d4766ef2e5834b88d7923a872d
-
SHA1
280f49b812be00025fd54ab9181f1fd557bbe1e3
-
SHA256
2f3e664a0aee652b81e65d2314945140523667bf88909c0a7f6901740dd92e6d
-
SHA512
8a6cccb23f43f00a9dd79a719c574a6b9b032f7afce3818e8888a14f28e998455964915c0bf0aeeb9009aecc53ca26ea98dfa6ea01634cce229108f838b85105
-
SSDEEP
1536:+RLMkhOabE7bjSuCCdFLUvXybjS9AENePba5:gL2QEeH6JU6bm9pNf
Malware Config
Signatures
Files
-
2f3e664a0aee652b81e65d2314945140523667bf88909c0a7f6901740dd92e6d.exe windows x86
c02904982b79bad750f3babd0e00af81
Code Sign
fd:88:ab:5d:be:72:f4:b9:e1:b3:09:ed:75:20:5b:7c:38:30:43:18Signer
Actual PE Digestfd:88:ab:5d:be:72:f4:b9:e1:b3:09:ed:75:20:5b:7c:38:30:43:18Digest Algorithmsha1PE Digest MatchestrueTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mfc42
ord5289
msvcrt
_except_handler3
user32
GetClientRect
oleaut32
SysFreeString
Sections
.text Size: 47KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE