Static task
static1
Behavioral task
behavioral1
Sample
fa42e5ab296e20cb353960330fa0241665db51ce54c58a3b159e90e69b664cc2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa42e5ab296e20cb353960330fa0241665db51ce54c58a3b159e90e69b664cc2.exe
Resource
win10v2004-20220812-en
General
-
Target
fa42e5ab296e20cb353960330fa0241665db51ce54c58a3b159e90e69b664cc2
-
Size
64KB
-
MD5
f42abe6c69afc831b18f7bb52e3ee5c4
-
SHA1
db97d05e86fcd6c134ab271c40456d41bacfb6bd
-
SHA256
fa42e5ab296e20cb353960330fa0241665db51ce54c58a3b159e90e69b664cc2
-
SHA512
04d5b1874b7c5687f13651e7ebdb3e08ec0f966d7d550a4614804d1a1cc4e49184f82a397033d752bf430a716fff89ed54200a87aaea99e6c04af2a619255647
-
SSDEEP
192:/D+c8Y37DybrgKmcna7wySLsTkfoqRElTiEEFS05mFrnb2BsMkV1egS:/DGYLGbrPfac176XJ05mekfe
Malware Config
Signatures
Files
-
fa42e5ab296e20cb353960330fa0241665db51ce54c58a3b159e90e69b664cc2.exe windows x86
f5b646af622772e6496fa700061d7f22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineA
GetDriveTypeA
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
DeleteFileA
GetTickCount
SetFileAttributesA
WriteFile
lstrcatA
lstrcpyA
lstrlenA
CreateFileA
CopyFileA
GetTempPathA
CloseHandle
user32
GetForegroundWindow
GetMessageA
LoadCursorA
LoadIconA
RegisterClassExA
SendMessageA
SetTimer
TranslateMessage
keybd_event
DispatchMessageA
DefWindowProcA
CreateWindowExA
FindWindowExA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 974B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE