Static task
static1
Behavioral task
behavioral1
Sample
fa18a501411f545c3d67e178fbd3874162c2c9254a86f8083a325098537b97e1.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
fa18a501411f545c3d67e178fbd3874162c2c9254a86f8083a325098537b97e1.exe
Resource
win10v2004-20220414-en
General
-
Target
fa18a501411f545c3d67e178fbd3874162c2c9254a86f8083a325098537b97e1
-
Size
573KB
-
MD5
f7dd0b6b02df52dc345153fdc30f43cf
-
SHA1
6e772c7cf95e7cac417407fe8b0a2c67aabc1473
-
SHA256
fa18a501411f545c3d67e178fbd3874162c2c9254a86f8083a325098537b97e1
-
SHA512
64e6357d36b811cc014ee6630db2f1695e9af66555d23bcf7531e64eba10349ea1ae9a8c807d95ce4f20a3f9a60f3b64766b4997fb63198cc23068c10aec4a4a
-
SSDEEP
12288:oaE86Q4BBNYIDYGqTYYYEgtiSfYKaQxBYamYYYYYYYPRYYYYY6YCYYYYYYu:i80BIgNIapC
Malware Config
Signatures
Files
-
fa18a501411f545c3d67e178fbd3874162c2c9254a86f8083a325098537b97e1.exe windows x86
6e575be4eda35509d78d2de2deb94eb1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetConsoleWindow
CreateFileW
DecodePointer
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
GetStringTypeW
GetFileType
SetStdHandle
LCMapStringW
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
RaiseException
oleaut32
VarFormatFromTokens
LPSAFEARRAY_UserSize
VarDecFromUI1
VarR8FromI4
VarBoolFromUI2
VarI1FromUI1
wininet
FtpFindFirstFileW
DeleteUrlCacheContainerW
ParseX509EncodedCertificateForListBoxEntry
SetUrlCacheEntryInfoA
InternetConnectW
wsnmp32
ord502
ord106
ord205
ord606
ord903
ord601
wsock32
listen
WSACleanup
WSAGetLastError
ord1111
winmm
mciSetDriverData
mmioStringToFOURCCW
midiInGetErrorTextW
DrvGetModuleHandle
timeSetEvent
mciGetDeviceIDW
mpr
WNetOpenEnumW
WNetDisconnectDialog1A
WNetGetUniversalNameA
user32
SetWindowPos
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ