Static task
static1
Behavioral task
behavioral1
Sample
fa9e7c8dfd6cfb04df638274be6421e5feddd260a1de33e636d84680e41968ea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa9e7c8dfd6cfb04df638274be6421e5feddd260a1de33e636d84680e41968ea.exe
Resource
win10v2004-20220812-en
General
-
Target
fa9e7c8dfd6cfb04df638274be6421e5feddd260a1de33e636d84680e41968ea
-
Size
167KB
-
MD5
0c506721600d5878c26f9cf4cdd77bd1
-
SHA1
0ebc8c6d101b5e3568290b7b96c75ff144dbb266
-
SHA256
fa9e7c8dfd6cfb04df638274be6421e5feddd260a1de33e636d84680e41968ea
-
SHA512
1f483c2cc3f1cf5f342763f9e88679030d3a8dfc41f8365debe3dab5d262f7a87a9b9895bd620fbbd8e0bd97e775051c900a5f8ba98078187566ce7a957c24d4
-
SSDEEP
3072:eydI49m22j0to+u7SN7ioqm8/lkTkQfnIaKwDB/dRBK4zHSysDmWQU:e6U22j0vu7ScG89eQK/fBJ1S
Malware Config
Signatures
Files
-
fa9e7c8dfd6cfb04df638274be6421e5feddd260a1de33e636d84680e41968ea.exe windows x86
3395789e2d018a3df12650fb5f886850
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SetFilePointer
VirtualAlloc
GlobalGetAtomNameW
FreeLibrary
GetDateFormatA
GetLocaleInfoA
GetCPInfo
HeapSize
SetStdHandle
EnumResourceNamesA
RtlUnwind
LoadLibraryA
GetTimeFormatA
GetOEMCP
IsValidCodePage
GetCPInfoExW
InitializeCriticalSection
HeapReAlloc
GetACP
WriteConsoleA
GetConsoleOutputCP
RaiseException
shlwapi
SHCreateStreamOnFileA
PathAppendA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathIsFileSpecA
PathCreateFromUrlW
occache
FindControlClose
Sections
.text Size: 136KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ