Static task
static1
Behavioral task
behavioral1
Sample
fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72.exe
Resource
win7-20220414-en
General
-
Target
fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72
-
Size
172KB
-
MD5
6699fa15ef1ee8eb137d7a5ef73b22f9
-
SHA1
a791f706fe3a3ba405a67fc0720601f287dbff10
-
SHA256
fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72
-
SHA512
d3511b4718bdefc777130e3b58cc2560f70b13171c713b42e2373f5cc45ad653e8571b53588a627be49260d0848959381a96fdcecfce1767280e04b3e4d3ac8b
-
SSDEEP
3072:j51B2L6BRZJpfUrAljDxN+ymULZLF381dwVHG51n5ADANOG1E2cc:91gAbGmjDxELQgEm5ZlB1E2c
Malware Config
Signatures
Files
-
fa241e69ab0fe614283f53e81b31ea926ae1ea4e4bfbc051728f9b7277adef72.exe windows x86
4aaf0beb2ac3eaecbc7215aae80ced6d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageTime
IsZoomed
IsWindowVisible
GetMenuItemCount
SetCapture
GetMenu
GetDesktopWindow
powrprof
CanUserWritePwrScheme
shlwapi
ord29
oleaut32
GetRecordInfoFromTypeInfo
VarDecFromR8
comdlg32
FindTextW
psapi
GetModuleFileNameExW
advapi32
DeleteService
msvcrt
toupper
kernel32
GetCurrentThread
GetCurrentProcess
ExpandEnvironmentStringsW
GetThreadPriorityBoost
GetCommMask
GetCommandLineA
GlobalGetAtomNameW
GetFileTime
CloseHandle
FileTimeToSystemTime
LoadLibraryA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
xUwGZ Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xUwGZ Size: 4KB - Virtual size: 570B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SM Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pna Size: 4KB - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 4KB - Virtual size: 268B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ