Static task
static1
Behavioral task
behavioral1
Sample
fd809163a55b6a7c5261ac56122c203328d74c0e2b7513b2d479dec47a5d62f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd809163a55b6a7c5261ac56122c203328d74c0e2b7513b2d479dec47a5d62f4.exe
Resource
win10v2004-20221111-en
General
-
Target
fd809163a55b6a7c5261ac56122c203328d74c0e2b7513b2d479dec47a5d62f4
-
Size
819KB
-
MD5
47fb818e1daf88e8e009aa9425b86332
-
SHA1
32fbca6e7cf6ed1e843ee8d9e9dec41aaeff5851
-
SHA256
fd809163a55b6a7c5261ac56122c203328d74c0e2b7513b2d479dec47a5d62f4
-
SHA512
96563fda17b9f0f41fe5b4bf67c095dfd0b28ef52f52af92be2484cdfbbe9e19d944c754330aa7379dbb7a859f071e9e8e74413dd1588d4f00ac706881db3c15
-
SSDEEP
12288:LslIC5ChBZJ0sC3BJb6lZB00eWVsHjfhprzfQtxKyTiVXqBiNKuKPddNLmHIVno:Ls3Chh0sCX+ZBFe+cjfhl06pXY3NL
Malware Config
Signatures
Files
-
fd809163a55b6a7c5261ac56122c203328d74c0e2b7513b2d479dec47a5d62f4.exe windows x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 483KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 56KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 44KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE