Static task
static1
Behavioral task
behavioral1
Sample
fc5eaae763b67a312dbe923e2a3d477e0c1548e1dad82cf27147adf09d83fa04.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc5eaae763b67a312dbe923e2a3d477e0c1548e1dad82cf27147adf09d83fa04.exe
Resource
win10v2004-20220901-en
General
-
Target
fc5eaae763b67a312dbe923e2a3d477e0c1548e1dad82cf27147adf09d83fa04
-
Size
310KB
-
MD5
335da50b0b139587089b9f9d133798a0
-
SHA1
8fb715e8af8d8136d668055b2ff192b444fbc9ec
-
SHA256
fc5eaae763b67a312dbe923e2a3d477e0c1548e1dad82cf27147adf09d83fa04
-
SHA512
db537a90e9c5706d99bc05b9c0a2e431a5ac6228abd5ac55ce9839f7814c15dd157edf0a780af16c7cbed8cbd6d19295235283278f80cea0df3575710ed79876
-
SSDEEP
6144:GLacFJMMKfi07oT5PkfDcYEK3VsHMgFUAJSWA/Q3wb6RIdNkZU:GLXsNfiT5PAtEKKMeUAJPnwb6RIXsU
Malware Config
Signatures
Files
-
fc5eaae763b67a312dbe923e2a3d477e0c1548e1dad82cf27147adf09d83fa04.exe windows x86
29380f59f1dc8d2dcd0da48968123821
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
HeapFree
CreateEventA
lstrlenA
DeleteFileA
OpenMutexA
LoadLibraryA
CloseHandle
GetFileAttributesA
GetStdHandle
GetStringTypeA
GetCurrentThread
GetPrivateProfileSectionA
FindVolumeClose
GetVersionExA
LocalLock
HeapDestroy
GetPrivateProfileIntW
DeviceIoControl
GetCurrentProcess
GetDriveTypeA
shell32
DragAcceptFiles
DragQueryFileA
SHGetSettings
DuplicateIcon
DragFinish
DllUnregisterServer
ShellMessageBoxA
SHGetMalloc
SHGetMalloc
SHFree
ExtractIconA
StrChrA
ShellAboutA
odbccp32
SQLGetAvailableDrivers
SQLInstallDriver
SQLConfigDataSource
SQLInstallODBC
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 15KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ