Static task
static1
Behavioral task
behavioral1
Sample
fb1aa701c6c7a8d65004439798953d3b8ca91beadddbdae5ee3f525b448691cd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fb1aa701c6c7a8d65004439798953d3b8ca91beadddbdae5ee3f525b448691cd.exe
Resource
win10v2004-20220812-en
General
-
Target
fb1aa701c6c7a8d65004439798953d3b8ca91beadddbdae5ee3f525b448691cd
-
Size
96KB
-
MD5
6ec9228591c957db4b6f7963caa43bfb
-
SHA1
dcb9e90c7e99d506733d702ba3ac229e75807c4d
-
SHA256
fb1aa701c6c7a8d65004439798953d3b8ca91beadddbdae5ee3f525b448691cd
-
SHA512
c408d27ed8a8f050fdc83ef093278c25b80dd86ef76c41cb70032e051ef3bcfcaed723eadfe563546ab12ad24467eeee073dfca9a3902c1c87b1d822cffc02a0
-
SSDEEP
1536:CWU7EkDM2pPkOaA3M3slPt+DoT97aNw98uo5loNofGekuWcsOfT:jUwkDMkLaA3Uspt+D8Ow98uo5loNofOo
Malware Config
Signatures
Files
-
fb1aa701c6c7a8d65004439798953d3b8ca91beadddbdae5ee3f525b448691cd.exe windows x86
1554a0d27e8e04f4de828ca34f736f57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
FreeLibrary
Sleep
OutputDebugStringA
CloseHandle
WaitForSingleObject
CreateMutexA
ReleaseMutex
lstrcatA
lstrcpynA
GetVersionExA
GetLastError
CreateThread
TerminateThread
WaitForMultipleObjects
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
GlobalGetAtomNameA
GetSystemDefaultLangID
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetModuleFileNameA
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
GetFileType
RaiseException
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
user32
KillTimer
SetTimer
FindWindowExA
LoadCursorA
LoadIconA
PostQuitMessage
FindWindowA
CallWindowProcA
GetPropA
DefWindowProcA
RemovePropA
GetWindowLongA
GetClassLongA
SetPropA
SetWindowLongA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
UnregisterClassA
CreateWindowExA
ShowWindow
RegisterClassExA
PostMessageA
gdi32
GetStockObject
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE