Static task
static1
Behavioral task
behavioral1
Sample
fa669ba964bed83adc5ba714c1ad13f3f1458685f1dfb7f15b1153287f918395.exe
Resource
win10v2004-20221111-en
General
-
Target
fa669ba964bed83adc5ba714c1ad13f3f1458685f1dfb7f15b1153287f918395
-
Size
8.0MB
-
MD5
145323cc93de52484d62ba9f00b126d8
-
SHA1
51f41b44b0e92f3a6285936c00b964c7f71056a2
-
SHA256
fa669ba964bed83adc5ba714c1ad13f3f1458685f1dfb7f15b1153287f918395
-
SHA512
1d8f67828758e66c1cafcbf57521407c7e4ef9d0b9e6f5bdd1bb411b9c72988d92490c99af2e021e620b12d58c5fd2691e25da9b6f6e0d775ee24c079d9f3265
-
SSDEEP
196608:V/dCtvzH3vtP2ym85LYe0Jx1zcVcmoRjOJH6DPjxCdpQ3jFun2ZKB:V/dCRzXFPMyYe0z1sHYqqxCd2zFpUB
Malware Config
Signatures
Files
-
fa669ba964bed83adc5ba714c1ad13f3f1458685f1dfb7f15b1153287f918395.exe windows x86
56dcfdb8194f00ea9fc21d2b84ecac08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxW
CharUpperBuffW
ole32
CoGetCurrentProcess
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 65.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.T*s Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.>F> Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.<`H Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ