Static task
static1
Behavioral task
behavioral1
Sample
faac0f23467c3c7be14e44955617f832c4da5d9422dbcd7a5696ce430dd80bcb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
faac0f23467c3c7be14e44955617f832c4da5d9422dbcd7a5696ce430dd80bcb.exe
Resource
win10v2004-20221111-en
General
-
Target
faac0f23467c3c7be14e44955617f832c4da5d9422dbcd7a5696ce430dd80bcb
-
Size
1.6MB
-
MD5
3480e3eab49f3cd6cb073129e1e0a72a
-
SHA1
2a8322bfb50b7119d0c1e8be74cad04f0ca72f4e
-
SHA256
faac0f23467c3c7be14e44955617f832c4da5d9422dbcd7a5696ce430dd80bcb
-
SHA512
a1d62ebbbab59bcff419ce37d565a4d99705a823c26a0de259948f880850f3f21c18a7318dd9e7f2ff00a93b141b3ccfabccb91aa3f14481bf7918a777ce1405
-
SSDEEP
24576:s/oSkqioBXQCoG7vFisb+UAVXxHd1cNYpUV9M6Vynsj9o49Z/Pl2NXbyKELAZdm8:LGlboc9Tg5cNftVRj64b/mXmKELTc
Malware Config
Signatures
Files
-
faac0f23467c3c7be14e44955617f832c4da5d9422dbcd7a5696ce430dd80bcb.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 1.6MB - Virtual size: 12.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE