Static task
static1
Behavioral task
behavioral1
Sample
fa4e598fe61e6938199af4450bbc194b213ce44cbaa06b51268381102f1c0d9e.exe
Resource
win7-20220718-en
General
-
Target
fa4e598fe61e6938199af4450bbc194b213ce44cbaa06b51268381102f1c0d9e
-
Size
5.0MB
-
MD5
b35136bf591963c588eb24e67df17537
-
SHA1
aadc59616a36a1dbdbf36b9893c91d33ac407869
-
SHA256
fa4e598fe61e6938199af4450bbc194b213ce44cbaa06b51268381102f1c0d9e
-
SHA512
1271704d322ed6ec637fac4c6e77bde3e154673f98998386eca9a813e5962f1907658932a8e22b43947fb5cf857bd2e8a9e192821fed073e1ad4972ee257eb4a
-
SSDEEP
98304:O6zqAU8XdkCY4w++wrtGGCSGLGNIN9+taGQde0THQpnnFN9BXDm1fTawaE:Oz67vw++wr0vSGyNI/4+ecwZnn9BXuat
Malware Config
Signatures
Files
-
fa4e598fe61e6938199af4450bbc194b213ce44cbaa06b51268381102f1c0d9e.exe windows x86
b7d466deb60a3fbde907baa3f4975cca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalAlloc
GetBinaryTypeA
GetLastError
DebugActiveProcess
GetHandleInformation
lstrlenW
GetModuleHandleW
FindResourceA
GetFileAttributesExA
RemoveVectoredExceptionHandler
GetNumberFormatA
PeekConsoleInputA
WriteConsoleW
SetFilePointerEx
GetStringTypeW
OutputDebugStringW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
CloseHandle
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CreateSemaphoreW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FatalAppExitA
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
winhttp
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4.8MB - Virtual size: 83.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ