Static task
static1
Behavioral task
behavioral1
Sample
32801599d24cd534b20f97cc5a317c4e7aff030703c00d952e3f3070edcf24e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32801599d24cd534b20f97cc5a317c4e7aff030703c00d952e3f3070edcf24e8.exe
Resource
win10v2004-20220812-en
General
-
Target
32801599d24cd534b20f97cc5a317c4e7aff030703c00d952e3f3070edcf24e8
-
Size
19KB
-
MD5
fc52233cd7bd4dde31ee2ad2ada8b17c
-
SHA1
fdeda090c0bc430725087a9e7787118e1811eabf
-
SHA256
32801599d24cd534b20f97cc5a317c4e7aff030703c00d952e3f3070edcf24e8
-
SHA512
dd865a9ae002f6d14f5ea6c8f0b0c1d0374fef471bd512bf52c8a28ce9a7eb9321f7c4e6bbfbee71681703de076482c90d7ddd2a74b922ddc775a17ae0d32b07
-
SSDEEP
192:fEzH6e+L8uF3yqn9Ped3P0f2dY8G8IkjyForncCDq:ffnCqn9P83P0yY8nearnrW
Malware Config
Signatures
Files
-
32801599d24cd534b20f97cc5a317c4e7aff030703c00d952e3f3070edcf24e8.exe windows x86
fa8c18dd0e7b4c0b8129f2779f74a395
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
printf
signal
system
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 1024B - Virtual size: 984B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.stabstr Size: 2KB - Virtual size: 72KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE