Static task
static1
Behavioral task
behavioral1
Sample
fcabe0ff5b52ae1aa18d5697ec4678eb2a4e365a337156d8a334a3b2f0621d50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcabe0ff5b52ae1aa18d5697ec4678eb2a4e365a337156d8a334a3b2f0621d50.exe
Resource
win10v2004-20220901-en
General
-
Target
fcabe0ff5b52ae1aa18d5697ec4678eb2a4e365a337156d8a334a3b2f0621d50
-
Size
208KB
-
MD5
6c87910703c9a764904fc2e0e88e7ab5
-
SHA1
d277a295f5e9a40d71612edb4f46c5b24e65bbb2
-
SHA256
fcabe0ff5b52ae1aa18d5697ec4678eb2a4e365a337156d8a334a3b2f0621d50
-
SHA512
5029540626b6d89e138836d8e6cd16b3f440306502a125f19f3d931c9a673bb9ad89730c03fd3b323b81740ba8159aaaed1725c91190122ccde55c39511690aa
-
SSDEEP
6144:ZE49Bao8PJEuXi6nR+BgnUGcSy8chVdGBid:FqRi6RtnUGcB8idh
Malware Config
Signatures
Files
-
fcabe0ff5b52ae1aa18d5697ec4678eb2a4e365a337156d8a334a3b2f0621d50.exe windows x86
45f19ff987dd4216c359d3cc016ad4da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
MultiByteToWideChar
FindResourceA
GetOEMCP
SetLastError
QueryPerformanceCounter
CreateFileA
SystemTimeToFileTime
GetTickCount
LoadLibraryW
WideCharToMultiByte
HeapFree
GetLocalTime
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcpyA
lstrcmpA
CloseHandle
lstrlenA
GetProcessHeap
GetLocaleInfoA
HeapAlloc
scecli
SceBrowseDatabaseTable
SceAddToNameStatusList
SceCloseProfile
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAnalyzeSystem
schannel
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
advapi32
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 3KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ