Static task
static1
Behavioral task
behavioral1
Sample
fdb8cd16e70818dbd52ff6348f7a46e96e6e9965a429ba6c1b4ed936cebca698.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fdb8cd16e70818dbd52ff6348f7a46e96e6e9965a429ba6c1b4ed936cebca698.exe
Resource
win10v2004-20221111-en
General
-
Target
fdb8cd16e70818dbd52ff6348f7a46e96e6e9965a429ba6c1b4ed936cebca698
-
Size
30KB
-
MD5
7b4713c04deef472a343d7509d9d93d7
-
SHA1
9a60b78a5586f832fb41340bd519f48be780b617
-
SHA256
fdb8cd16e70818dbd52ff6348f7a46e96e6e9965a429ba6c1b4ed936cebca698
-
SHA512
ba37a3f5c045c92a196b8099eb9b532c22435591887a2bb8f23c2817dbac551c6448607b02d251ab9d1ba82935e59e218dfe269b7c10ea4966131133790182d8
-
SSDEEP
768:DC0CbwY6CldQ6xMp19YeOKfdGDImYFp5vAiqL:/BCldQK6vAiqL
Malware Config
Signatures
Files
-
fdb8cd16e70818dbd52ff6348f7a46e96e6e9965a429ba6c1b4ed936cebca698.exe windows x86
7345f9497130be252852f565608edfb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetTickCount
GetTempPathA
Sleep
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
user32
PeekMessageA
PostThreadMessageA
wsprintfA
Sections
.text Size: 1024B - Virtual size: 663B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ