Static task
static1
Behavioral task
behavioral1
Sample
2fda4e35a087a165a7911b8b100215433e7a650766364fc99fe5f808109999dd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2fda4e35a087a165a7911b8b100215433e7a650766364fc99fe5f808109999dd.exe
Resource
win10v2004-20220901-en
General
-
Target
2fda4e35a087a165a7911b8b100215433e7a650766364fc99fe5f808109999dd
-
Size
196KB
-
MD5
5583c0cfd188e5d8550fc6fceecad2e4
-
SHA1
f5d0bb0a5032a40ca76084adb5513ee979c217b5
-
SHA256
2fda4e35a087a165a7911b8b100215433e7a650766364fc99fe5f808109999dd
-
SHA512
418afd515919eee46ed28326ca9fd93ec043c1a7b012df64c76da579db473f7a118cfd6e9dc6ea860f4cb440cf7289be6ca42abba9366497f250dd5a9a9835f3
-
SSDEEP
3072:070BfbKtxDmq+HMP/CNcj/HmcPN9tdbPfXnfHJY7utwY01nurklubHiL8H9hemT:0EsKq6MPEcj/GcPnj+utVwnurkwR9HT
Malware Config
Signatures
Files
-
2fda4e35a087a165a7911b8b100215433e7a650766364fc99fe5f808109999dd.exe windows x86
b3b84238de271facd907ccf595edf4da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
WriteFile
ReadFile
SetFilePointer
CloseHandle
GetModuleFileNameA
GetCommandLineA
CreateFileA
shell32
ShellExecuteA
Sections
.text Size: 512B - Virtual size: 347B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 366B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ