Static task
static1
Behavioral task
behavioral1
Sample
fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe
Resource
win10v2004-20220812-en
General
-
Target
fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd
-
Size
1.6MB
-
MD5
7df90a607dba58822e2df864063c6f8e
-
SHA1
824c4e4a554f84cdf0d1d489705c46b85b4d8d3e
-
SHA256
fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd
-
SHA512
8cb3688bf00676e91175390396d8108787bd0a405745e6e9afb693c94d679edb767ae63917b2f57def8745740e36086efefa639f90a4d739081d42efc0670e97
-
SSDEEP
49152:eO9E2gDpp6oIGZt80+s6yODFxFoarvY7GGwJBzcEI2:IjDpp6mDUxyarewFI2
Malware Config
Signatures
Files
-
fd1e6878b0a3b99c2de4c7d50f0ce3b70956a625dab2f962b399d8ac06a850cd.exe windows x86
47952387d64834b5a192a77f583bb437
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
IsWindowVisible
advapi32
RegQueryValueExA
shell32
SHGetFolderPathW
Sections
.text Size: 775KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 815KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ