Static task
static1
Behavioral task
behavioral1
Sample
fed3b5c643234989a072cf345e6ff3773aaa61eb53d78109dfc65e7e4234a0b3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fed3b5c643234989a072cf345e6ff3773aaa61eb53d78109dfc65e7e4234a0b3.exe
Resource
win10v2004-20220812-en
General
-
Target
fed3b5c643234989a072cf345e6ff3773aaa61eb53d78109dfc65e7e4234a0b3
-
Size
364KB
-
MD5
63b7800a9f5fcde70e6b5bb9e6b54dab
-
SHA1
6f4d34d58a51b10ea61e90cd2bcf9c4bd40c04b6
-
SHA256
fed3b5c643234989a072cf345e6ff3773aaa61eb53d78109dfc65e7e4234a0b3
-
SHA512
9acfe08996866bb9a867977467476d0e62f987cc1b5fe6a32fa3787eeb359fd6c42506358eeea0f5c115a5a08b12f08bccc737f0a9d29562df12d595ab3694e3
-
SSDEEP
6144:ceAnXf8gexvcT2v5R/ehEEm3NSpIMWCrTamHy65RV:ceAnZYvPv5R/FrMBHHy653
Malware Config
Signatures
Files
-
fed3b5c643234989a072cf345e6ff3773aaa61eb53d78109dfc65e7e4234a0b3.exe windows x86
a23330dea1547a72bcec885311fdfaef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
MessageBoxA
MessageBoxA
Sections
.52pojie Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: 96KB - Virtual size: 389KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: 260KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52pojie Size: 4KB - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ