Resubmissions
11-01-2023 16:00
230111-tf3nkahc7z 3Static task
static1
Behavioral task
behavioral1
Sample
SamFwFRPTool.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SamFwFRPTool.exe
Resource
win10v2004-20221111-en
General
-
Target
SamFwFRPTool.exe
-
Size
52.1MB
-
MD5
c82314720e12a99a70b7f911ba4c8642
-
SHA1
7527bdef005e17c0b376563a8f6024b2b93cb5ed
-
SHA256
b3bea90021425e38bec90ec64a3ebf34b310ae2dca86ec247f3f1380d2c1bb12
-
SHA512
0092d834d7a793dec55f1f3816130c876c9f4cf83210c0e6b8439522ce3119a24deb52e3e5b6b8f09e9e6b1997ab90866424a8b51a18b4715fdfcf2d637be159
-
SSDEEP
98304:V7gEy+i+qrW7gEy+i+qrh7gEy+i+qriE7gEy+i+qr:
Malware Config
Signatures
Files
-
SamFwFRPTool.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 52.0MB - Virtual size: 52.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ