Static task
static1
Behavioral task
behavioral1
Sample
fc7fc4914bead46feeb93a996858dc538b92c94b1365362db74330fe9ef8bbaa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc7fc4914bead46feeb93a996858dc538b92c94b1365362db74330fe9ef8bbaa.exe
Resource
win10v2004-20220812-en
General
-
Target
fc7fc4914bead46feeb93a996858dc538b92c94b1365362db74330fe9ef8bbaa
-
Size
48KB
-
MD5
61fbd715c64abf15419dfe79eb283790
-
SHA1
d7964d8681730fa3e8339ee8125225f10a1e492c
-
SHA256
fc7fc4914bead46feeb93a996858dc538b92c94b1365362db74330fe9ef8bbaa
-
SHA512
24893b6394b71ca18ea9b4ee9994b127a5aec9d236d80b4858a215050d2c1063aa19197c3816b30e5eb8af53c2fd1ef7def06116b26ec3d40f11f6f53abaff48
-
SSDEEP
384:/1beeEHJOS/pHyveFaXW5Q8Ka2loACV9CeRWCNDqz7SurzXbD9nypZBXhSqoVsi7:9xiyveFaXWhAKhRBkdnspoGi3t
Malware Config
Signatures
Files
-
fc7fc4914bead46feeb93a996858dc538b92c94b1365362db74330fe9ef8bbaa.exe windows x86
ef1d4091397a19d07915a29095a657ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
ExitThread
Sleep
TerminateProcess
CreateThread
CloseHandle
ReleaseMutex
GetLastError
OpenMutexA
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetShortPathNameA
WaitForSingleObject
ExitProcess
CreateMutexA
lstrlenA
CopyFileA
GlobalMemoryStatusEx
GetComputerNameA
GetLocaleInfoW
RaiseException
InterlockedExchange
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
FreeLibrary
LocalAlloc
user32
wsprintfA
Sections
long Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE