Static task
static1
Behavioral task
behavioral1
Sample
fba192a6b62bdaf3b8cd65467d552d55e5af1ede2e948840fcb82e2927c4c0f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fba192a6b62bdaf3b8cd65467d552d55e5af1ede2e948840fcb82e2927c4c0f8.exe
Resource
win10v2004-20220812-en
General
-
Target
fba192a6b62bdaf3b8cd65467d552d55e5af1ede2e948840fcb82e2927c4c0f8
-
Size
55KB
-
MD5
35795b666b76ed78789140af2abe0e50
-
SHA1
d3144637926292a9149aa16e4858650d745402f1
-
SHA256
fba192a6b62bdaf3b8cd65467d552d55e5af1ede2e948840fcb82e2927c4c0f8
-
SHA512
c8a0bc0b08bbe4c0584306d2b88692fe6c80a8f9f08f331150522fa909dd8ebe27f10832ac2fe86687f54cf58f9be344686e766f392f852f6af7dd8e45db52c7
-
SSDEEP
1536:DtahpZ6xDAJSTnvztMG7+igHX7hP5BGi0Ymg:whpZmAUnZ5a59BBwg
Malware Config
Signatures
Files
-
fba192a6b62bdaf3b8cd65467d552d55e5af1ede2e948840fcb82e2927c4c0f8.exe windows x86
5eea6fecc550e2786b6e075a5e47f5d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetLastError
ReadFile
Beep
ReadConsoleW
PeekConsoleInputW
WaitForSingleObject
GetTickCount
SetConsoleCtrlHandler
FlushConsoleInputBuffer
SetConsoleMode
GetConsoleMode
GetStdHandle
HeapSetInformation
GetModuleFileNameW
WriteConsoleW
ExitProcess
GetConsoleOutputCP
HeapReAlloc
HeapFree
HeapSize
HeapAlloc
GetProcessHeap
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
CompareStringA
GetThreadLocale
CompareStringW
lstrlenW
lstrlenA
GetFileType
VerSetConditionMask
VerifyVersionInfoW
FormatMessageW
LocalFree
SetThreadUILanguage
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
InterlockedExchange
InterlockedCompareExchange
GetCurrentProcessId
GetCurrentThreadId
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
Sleep
msvcrt
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__wgetmainargs
memset
_errno
wcstol
exit
wcschr
__iob_func
_vsnwprintf
_memicmp
_get_osfhandle
_fileno
fflush
fprintf
wcstod
wcstoul
user32
CharNextW
CharUpperW
CharUpperBuffW
LoadStringW
ws2_32
WSACleanup
shlwapi
StrChrW
StrChrIW
StrStrW
StrStrIW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
maflrya Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE