Static task
static1
Behavioral task
behavioral1
Sample
fbe82992921123fd476c7ca917b605f54fed1e81c07f6d0a4479573b5e84a10c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fbe82992921123fd476c7ca917b605f54fed1e81c07f6d0a4479573b5e84a10c.exe
Resource
win10v2004-20220812-en
General
-
Target
fbe82992921123fd476c7ca917b605f54fed1e81c07f6d0a4479573b5e84a10c
-
Size
1.3MB
-
MD5
25f0eb52833cb0bd6c2863e51d39dc52
-
SHA1
c785aaea667232edb90e50b6b8341227459a705d
-
SHA256
fbe82992921123fd476c7ca917b605f54fed1e81c07f6d0a4479573b5e84a10c
-
SHA512
c9b83db9aaf3271857b6517e99770d17187de015bd4ead0e62de5079df1149dbffc71d3dfde162a038756280d6d946dc88e5131b344ed331f54553e37d3eb932
-
SSDEEP
24576:CsIo6Pb+d2spUjaozp/ZMpKGN8B9cSiFp05KRs6SzYlAIWeqpdyvVX2CUOQpQIJj:F+PBOoFZMpKmr+uRQ7IGpys/7AeNlwy
Malware Config
Signatures
Files
-
fbe82992921123fd476c7ca917b605f54fed1e81c07f6d0a4479573b5e84a10c.exe windows x86
54cd743cc377f9801d735a0ee95ffc63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
advapi32
StartServiceA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
shell32
SHGetFolderPathW
Sections
.text Size: 571KB - Virtual size: 572KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 765KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ