Static task
static1
Behavioral task
behavioral1
Sample
fc3416e961a1303dd40bad97ca6dc3216e2d464a35c81881dee93e317ec8bb05.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc3416e961a1303dd40bad97ca6dc3216e2d464a35c81881dee93e317ec8bb05.exe
Resource
win10v2004-20220901-en
General
-
Target
fc3416e961a1303dd40bad97ca6dc3216e2d464a35c81881dee93e317ec8bb05
-
Size
63KB
-
MD5
41c21431929ef38e948d73f1634cbc3e
-
SHA1
983e58836251b349955a5cee68373b0d9032477b
-
SHA256
fc3416e961a1303dd40bad97ca6dc3216e2d464a35c81881dee93e317ec8bb05
-
SHA512
0da7d81f4d3df55759614ed8f882d8655bf7cd5ec1c11e60c59f4df442eddcb9857333bccd4b1721b6d03539f075ee234c16ffbd0aa437150b210e85d3e39534
-
SSDEEP
1536:4GQFFtUki5X28r9daPQ7KIo1ETYT0r9QwpkrWGFNPXHzbnp5BIBLW6t:qFvUkipn5dKQ7KISETr9zGyGF9pvIBL9
Malware Config
Signatures
Files
-
fc3416e961a1303dd40bad97ca6dc3216e2d464a35c81881dee93e317ec8bb05.exe windows x86
8dc5732efce1052dcf531f4f7cf6687e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellAboutA
ShellExecuteA
ShellExecuteEx
DragFinish
DragQueryFileA
DragAcceptFiles
ExtractAssociatedIconA
ord62
olesvr32
ord2
ord10
ord5
ord4
ord7
ord6
ord3
ord8
olecli32
ord14
ord38
ord40
ord13
ord6
ord18
ord22
ord29
ord32
ord25
ord3
ord4
ord12
ord35
ord37
ord24
ord11
ord19
ord46
ord27
ord23
ord21
ord2
ord39
ord28
ord36
ord15
ord44
ord9
ord42
ord45
ord43
ord20
ord10
ord41
kernel32
_lread
AddAtomA
GlobalFree
VirtualFree
GetFileType
VirtualAlloc
GetCPInfo
GetOEMCP
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetACP
ExitProcess
GetVersion
RtlUnwind
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
GlobalDeleteAtom
GlobalAddAtomA
GetModuleHandleA
LocalLock
LocalUnlock
LocalAlloc
MulDiv
FindFirstFileA
LocalFree
RtlMoveMemory
GlobalUnlock
lstrcmpiA
GlobalLock
_lclose
_llseek
_lcreat
OpenFile
lstrlenA
lstrcpyA
GetProcAddress
DeleteFileA
GetLastError
CloseHandle
CreateThread
GlobalReAlloc
FindClose
_lwrite
GetTempFileNameA
GetTempPathA
GetAtomNameA
WaitForSingleObject
DeleteAtom
GlobalAlloc
_lopen
Sleep
GlobalHandle
lstrcatA
lstrcmpA
user32
PostQuitMessage
SetWindowTextA
IsWindow
wsprintfA
ShowWindow
GetSubMenu
EnableMenuItem
InsertMenuA
DestroyMenu
CreatePopupMenu
DeleteMenu
GetClientRect
EndDialog
SetDlgItemTextA
GetSystemMetrics
MessageBoxA
DialogBoxParamA
OemToCharA
BringWindowToTop
EnumThreadWindows
DrawFocusRect
OffsetRect
DrawTextA
PeekMessageA
IsWindowVisible
SetRect
GetWindowDC
SystemParametersInfoA
EnableScrollBar
EnableWindow
CheckRadioButton
IsDlgButtonChecked
IsWindowEnabled
GetDlgItem
UpdateWindow
EndPaint
GetSysColor
BeginPaint
IsClipboardFormatAvailable
DefWindowProcA
ScrollWindow
SetScrollPos
GetScrollRange
GetScrollPos
FillRect
ReleaseCapture
SetCursor
ScreenToClient
SetCapture
IsIconic
SetClipboardData
EmptyClipboard
GetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
DestroyIcon
DrawIcon
CharUpperBuffA
CharLowerA
RegisterClipboardFormatA
SetRectEmpty
IsRectEmpty
SetFocus
GetMenu
SendMessageA
GetTopWindow
WinHelpA
LoadAcceleratorsA
GetSysColorBrush
GetDC
ReleaseDC
LoadIconA
LoadCursorA
RegisterClassA
DestroyWindow
TranslateAcceleratorA
GetMessageA
DispatchMessageA
CloseClipboard
OpenClipboard
GetClipboardData
SetWindowPos
InvalidateRect
GetKeyState
CreateWindowExA
LoadStringA
PostMessageA
TranslateMessage
gdi32
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
CopyMetaFileA
SetBkMode
TextOutA
PatBlt
GetTextExtentPointA
SetTextColor
SetBkColor
GetStockObject
CreateFontIndirectA
DeleteObject
SelectObject
GetDeviceCaps
SetTextAlign
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegCloseKey
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ