Static task
static1
Behavioral task
behavioral1
Sample
fbc145c2002bbe430eea94d8d23b04aa7a77c35de3bdc6f0272de66dec7df08b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fbc145c2002bbe430eea94d8d23b04aa7a77c35de3bdc6f0272de66dec7df08b.exe
Resource
win10v2004-20220901-en
General
-
Target
fbc145c2002bbe430eea94d8d23b04aa7a77c35de3bdc6f0272de66dec7df08b
-
Size
290KB
-
MD5
64d577098242bfc8583be76c68549400
-
SHA1
3c3990ed4881ae534d332745e6fe19c364779f3c
-
SHA256
fbc145c2002bbe430eea94d8d23b04aa7a77c35de3bdc6f0272de66dec7df08b
-
SHA512
fe81aa2139f3106555e40d995e82c21c1d9163aca40c419ab60a9eebebf38ccb9686ce6d62a0bc0b281a1920a39d940598e2737c8fa8fd6e2c2a19fc20cb1a33
-
SSDEEP
6144:NC/4OMTe7dShZ2zIcEBx38ksQhznwyDWRQXBP0XJlW8YA:MMTeAkzIcq3ORQXBkY8Y
Malware Config
Signatures
Files
-
fbc145c2002bbe430eea94d8d23b04aa7a77c35de3bdc6f0272de66dec7df08b.exe windows x86
f9fb80cafbdb18f1d0f9548f4a719e74
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameW
QueryInformationJobObject
EnumSystemLanguageGroupsA
SetThreadExecutionState
GetFileTime
FindNextVolumeA
CompareStringA
DnsHostnameToComputerNameW
GetTimeZoneInformation
ResetEvent
Process32NextW
DefineDosDeviceW
GetFileType
GetNumberFormatA
CreateDirectoryW
ConvertDefaultLocale
EndUpdateResourceA
QueryPerformanceCounter
WritePrivateProfileStringW
SetNamedPipeHandleState
GetSystemDefaultUILanguage
SetVolumeMountPointA
FormatMessageA
SetFileApisToOEM
GetPrivateProfileStringA
GetProcessVersion
user32
EnableWindow
GetDCEx
ClientToScreen
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 959B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ