Static task
static1
Behavioral task
behavioral1
Sample
f01daa312b11932267f9649fc8027e37f19332adc225762d8173386f3d5687c1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f01daa312b11932267f9649fc8027e37f19332adc225762d8173386f3d5687c1.exe
Resource
win10v2004-20221111-en
General
-
Target
f01daa312b11932267f9649fc8027e37f19332adc225762d8173386f3d5687c1
-
Size
910KB
-
MD5
15c126deb6c8c57bb4e3ad335510ec4e
-
SHA1
3903a43fcd9fd37b9a6c4298c5585e16665dec63
-
SHA256
f01daa312b11932267f9649fc8027e37f19332adc225762d8173386f3d5687c1
-
SHA512
58370ee465a2f0a42523d5d32933babd9536be903261a9ddf4af8a7df36e2b0c405616555514fb38659e66215cd3371adce63eca1e6e9f5ed90a94e0fce22fb9
-
SSDEEP
24576:sazlQb/+vX7bOui1FaR0WNiHsp2TW8j+2U+YnBaLr0War:s1pui1FGiMp2K1PVBEr0War
Malware Config
Signatures
Files
-
f01daa312b11932267f9649fc8027e37f19332adc225762d8173386f3d5687c1.exe windows x86
6d7401a013abf73f6d1660fbb35ed0f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
user32
CharLowerW
advapi32
RegCloseKey
comctl32
PropertySheet
Sections
Size: - Virtual size: 77.8MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE