Static task
static1
Behavioral task
behavioral1
Sample
fd2dfcf4775c00f5b56675d88ad3e7f764de9c3d503ad92970722f09d91621f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd2dfcf4775c00f5b56675d88ad3e7f764de9c3d503ad92970722f09d91621f9.exe
Resource
win10v2004-20220812-en
General
-
Target
fd2dfcf4775c00f5b56675d88ad3e7f764de9c3d503ad92970722f09d91621f9
-
Size
312KB
-
MD5
669a4fb6c2f2b6a0ffeabcf1ce2e3880
-
SHA1
7ea1f43a014d1e5f7809c310ee540e53dc7bca1b
-
SHA256
fd2dfcf4775c00f5b56675d88ad3e7f764de9c3d503ad92970722f09d91621f9
-
SHA512
0cb99d0f74382ebde29b0c2ac015fc5c766854022a889dc38ccd89ce32e3d40fd6b66d9563b23b97c013c0a25745dae3334f676ae8d09972da65e21d9708b6b5
-
SSDEEP
6144:5u0hCiSEBssYqtHuIJmA7sswAoL54MSSCc:4JREBssYUJ77jwJL54MJB
Malware Config
Signatures
Files
-
fd2dfcf4775c00f5b56675d88ad3e7f764de9c3d503ad92970722f09d91621f9.exe windows x86
c719e70a25f080857d4a1a9a9f66873e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
InterlockedDecrement
InterlockedIncrement
user32
wsprintfA
MessageBoxA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 284KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE