Static task
static1
Behavioral task
behavioral1
Sample
fc30884c12e0844f309e54bef3cb1e103762ab6c7069a765c400b7953b20fe45.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc30884c12e0844f309e54bef3cb1e103762ab6c7069a765c400b7953b20fe45.exe
Resource
win10v2004-20220812-en
General
-
Target
fc30884c12e0844f309e54bef3cb1e103762ab6c7069a765c400b7953b20fe45
-
Size
815KB
-
MD5
16f4fc04e0b4bec65bf904ab7b337c51
-
SHA1
28dc52a92b2a24aa7a9137af67f72eb22917fd4f
-
SHA256
fc30884c12e0844f309e54bef3cb1e103762ab6c7069a765c400b7953b20fe45
-
SHA512
5473f5d6d57da82521e1319366b08caefa22baf6d3a42b01abd158fe5457ac8dfdd456c918f427e4ae543c21db42ffdd90c4c17541e3ca507c21a21696d656e3
-
SSDEEP
24576:vNZmX+0kGyXzxqR5hzN+lyT7Olwx0sYQuil:vNZNiIY6QHrx0O9
Malware Config
Signatures
Files
-
fc30884c12e0844f309e54bef3cb1e103762ab6c7069a765c400b7953b20fe45.exe windows x86
a7e3777452e8b3783881588aa175404a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeLabelW
LeaveCriticalSection
GetStringTypeA
GetFileSize
SetEnvironmentVariableA
GetCurrentProcess
lstrcpyW
GetPrivateProfileIntW
SetCurrentDirectoryA
GetComputerNameA
LoadLibraryA
GetConsoleCP
FoldStringW
GetCalendarInfoW
EnterCriticalSection
DeleteFileA
GetConsoleTitleA
GetTickCount
HeapCreate
adsldpc
AllocADsStr
AllocADsMem
FreeADsStr
ADSIGetNextRow
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 803KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ