Static task
static1
Behavioral task
behavioral1
Sample
fb38fadfdf28e4cb9740277e798bd0305553fc62f27813ecc6b06d3395af39ca.exe
Resource
win7-20220812-en
General
-
Target
fb38fadfdf28e4cb9740277e798bd0305553fc62f27813ecc6b06d3395af39ca
-
Size
2.6MB
-
MD5
3a01c383d49871dc3cf88b72c35f6b65
-
SHA1
5fa7285d91ad26e3d8721d5dc408789984648010
-
SHA256
fb38fadfdf28e4cb9740277e798bd0305553fc62f27813ecc6b06d3395af39ca
-
SHA512
b9ce7b80559e0b0ffb6d366db5a20d478014de69c7f17da1f73ed413f865cd539f3ec41b458e263f736023ea3a56d0df2f2b853a87994fffe9b8367cc1f0bf8d
-
SSDEEP
49152:mTU8Zqq8wOHR2XN4eSRZLIYKV9zcaKIukf2zGYL2fSTvNCcCVjYAZNd5j8Tt5FCB:m4alg2XN4ewZ8YKHzhHRf/YL2fSTE9k1
Malware Config
Signatures
Files
-
fb38fadfdf28e4cb9740277e798bd0305553fc62f27813ecc6b06d3395af39ca.exe windows x86
f263b984eed26508357900f6691515a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FindClose
Sections
Size: 314KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tdbhpygi Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
erymvdic Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE