Static task
static1
Behavioral task
behavioral1
Sample
FinalGate.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FinalGate.exe
Resource
win10v2004-20220812-en
General
-
Target
FinalGate.exe
-
Size
16KB
-
MD5
7eea20e4a44bd49befd2363d9d0582e6
-
SHA1
8f380f44b2872b257f81b36d2b60605855e968d5
-
SHA256
8d665653f572b550400313feb208b277604805803182b15868daeafc80eb40ae
-
SHA512
ce9cd57562343f48c0e7ab7ad5529640c0bbf08a110c44944d3d67894be1f9007c411e7536261b6553dafe480b2faead0f07d14b96252b762450cdd5e8efa0d5
-
SSDEEP
384:kvvbVrMm7TVcTFdYUWactJtjvCHLPJs0SYEnIs:+V5OYUVctDCVtSZb
Malware Config
Signatures
Files
-
FinalGate.exe.exe windows x86
3b12a5fb9018a36b85a8aa68839eb32c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
vcruntime140
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
_except_handler4_common
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__p__commode
_set_fmode
api-ms-win-crt-runtime-l1-1-0
__p___argv
__p___argc
_controlfp_s
_exit
exit
_register_thread_local_exe_atexit_callback
_initterm
_get_narrow_winmain_command_line
terminate
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_c_exit
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
malloc
_callnewh
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
kernel32
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ