Static task
static1
Behavioral task
behavioral1
Sample
3323423302e45c87cc7ca36ec04dfe1f77751f43242cc46b568804b7ddc3060d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3323423302e45c87cc7ca36ec04dfe1f77751f43242cc46b568804b7ddc3060d.exe
Resource
win10v2004-20220812-en
General
-
Target
3323423302e45c87cc7ca36ec04dfe1f77751f43242cc46b568804b7ddc3060d
-
Size
845KB
-
MD5
fdeaeee815a8031fc953d13789f81491
-
SHA1
fb00b2bee3e1787f56f585466043e2590433c884
-
SHA256
3323423302e45c87cc7ca36ec04dfe1f77751f43242cc46b568804b7ddc3060d
-
SHA512
4c2ec0d15a2cf41669db1463223b43df40857bb7a41537b4cc99f47210b20b93be0a41c32d1fbd92c5b3ada3ede053fe99924e2a3c9e589920bd28ba046e4852
-
SSDEEP
24576:5aqtyxye4lm6LXhrNtelrBRfbTGUY3JdI7J:5HlDhx0fPG35dI7J
Malware Config
Signatures
Files
-
3323423302e45c87cc7ca36ec04dfe1f77751f43242cc46b568804b7ddc3060d.exe windows x86
8a2e056c9f76d696dc8f127c36a155de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
user32
IsChild
advapi32
RegCloseKey
Sections
Size: - Virtual size: 77.8MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE