Static task
static1
Behavioral task
behavioral1
Sample
fc904dd8560fa670554d0c4b8f239e6d9a95d9b7395f2b4d4a7ac2fec60b7046.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc904dd8560fa670554d0c4b8f239e6d9a95d9b7395f2b4d4a7ac2fec60b7046.exe
Resource
win10v2004-20220901-en
General
-
Target
fc904dd8560fa670554d0c4b8f239e6d9a95d9b7395f2b4d4a7ac2fec60b7046
-
Size
798KB
-
MD5
38adebf95b55e31343f0413462874990
-
SHA1
a5fe64a59f9b5cbb37488c3e308ac87a268f7717
-
SHA256
fc904dd8560fa670554d0c4b8f239e6d9a95d9b7395f2b4d4a7ac2fec60b7046
-
SHA512
1b2885a801ca1e03cb2a8c81e80ca701b8318d6608f441f81614ed34a4ef0b7c7e6f2d76430b8867ff895f614124a12fe2022f86a52f7c70b61775d75e98f866
-
SSDEEP
24576:WtEyic2Qh/N075fDCmspl3kbJt9acGJ6YbA:NyiNQz0754nyCctY
Malware Config
Signatures
Files
-
fc904dd8560fa670554d0c4b8f239e6d9a95d9b7395f2b4d4a7ac2fec60b7046.exe windows x86
0aab32cebc2950bfc737cfac61cae6bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalFlags
GetCurrentThreadId
CreateDirectoryA
GetFileAttributesW
ResumeThread
VirtualProtect
CreateFileW
GetLocaleInfoA
SuspendThread
lstrlenA
AddAtomA
GetTickCount
CreateFileW
LeaveCriticalSection
InterlockedExchange
GetModuleHandleA
IsValidLocale
HeapDestroy
OpenEventW
CreateMutexA
SetEvent
GetModuleFileNameA
PulseEvent
GetVersionExA
SetFilePointer
user32
GetWindowLongA
GetWindowTextA
PeekMessageA
GetWindowLongA
IsMenu
SetFocus
DestroyMenu
LoadCursorA
MessageBoxA
wsprintfA
SetRect
DestroyIcon
DispatchMessageA
dplayx
DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE