Static task
static1
Behavioral task
behavioral1
Sample
fa712614dabd623ad3f8f8ef76f953bb8b77a52670423cc07de3d87d8430ba8e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa712614dabd623ad3f8f8ef76f953bb8b77a52670423cc07de3d87d8430ba8e.exe
Resource
win10v2004-20220901-en
General
-
Target
fa712614dabd623ad3f8f8ef76f953bb8b77a52670423cc07de3d87d8430ba8e
-
Size
23KB
-
MD5
843d36215f39ce5b0f3496df1011202c
-
SHA1
6660f8d980229780e2731e231f1006cdfe654dde
-
SHA256
fa712614dabd623ad3f8f8ef76f953bb8b77a52670423cc07de3d87d8430ba8e
-
SHA512
1a455b4ad0f185c9950ea1de0a8bf2f7afc7ec00e8ea1c0d90719dfe4eada48baa14998950a89d809caa73fed7222b817c738c170e268bde3ef1bb8d05a3a07e
-
SSDEEP
384:5MeRQVO5d6IR+/3DqHUyi1o6EpFFxljBeORaIZaEuJ9dLqXB+JRb:xmVG+PaT6kF71eOZap92+H
Malware Config
Signatures
Files
-
fa712614dabd623ad3f8f8ef76f953bb8b77a52670423cc07de3d87d8430ba8e.exe windows x86
f1d64282b9f707b87698a250b6b5f84c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAddAtom
atl
AtlMarshalPtrInProc
kernel32
FreeLibrary
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
LoadLibraryW
GetProcAddress
GetTickCount
SetLastError
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ