Static task
static1
Behavioral task
behavioral1
Sample
fb79abbda8d378e0b6f8abcff7e9eab85d24555bd1a6cd66b1a71738976580c2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fb79abbda8d378e0b6f8abcff7e9eab85d24555bd1a6cd66b1a71738976580c2.exe
Resource
win10v2004-20221111-en
General
-
Target
fb79abbda8d378e0b6f8abcff7e9eab85d24555bd1a6cd66b1a71738976580c2
-
Size
171KB
-
MD5
163397ec7a1a1ba54ebfb7732a003140
-
SHA1
bbbf22d6ea40987779137853bc9aa17f8fa43db4
-
SHA256
fb79abbda8d378e0b6f8abcff7e9eab85d24555bd1a6cd66b1a71738976580c2
-
SHA512
ced3a2c07378213199071d664c34dcd172cf7c24963dce9f79cd0ba19e6bb74c8c28c776a927c3451a6a64b5a970b242968f06b19fcf264a2a94d1b49b4fd59a
-
SSDEEP
3072:sg7bFZBpiJrsZnW+IQ7RsmnRl2UK/Cin4rUSEJH/86DVJAknH0:nbF3pSwyQ7umnr2UCCXrPE3TU
Malware Config
Signatures
Files
-
fb79abbda8d378e0b6f8abcff7e9eab85d24555bd1a6cd66b1a71738976580c2.exe windows x86
57467a14bc224134962cd582b02b20af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetACP
GetStartupInfoW
CreateFileW
VirtualAlloc
GetCurrentThread
LoadLibraryA
GetProcAddress
GetOEMCP
user32
LoadCursorA
advapi32
RegOpenKeyA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 165KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ