Static task
static1
Behavioral task
behavioral1
Sample
fcf814a9152e92ca588184677fb3d37511e60c0aaae1e0ed73f10f8adafc4476.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fcf814a9152e92ca588184677fb3d37511e60c0aaae1e0ed73f10f8adafc4476.exe
Resource
win10v2004-20220901-en
General
-
Target
fcf814a9152e92ca588184677fb3d37511e60c0aaae1e0ed73f10f8adafc4476
-
Size
636KB
-
MD5
44391763cea1ad1f77d4cf3fc1493300
-
SHA1
ed0777fc081f033a754d97d8d051429eabe4e2d4
-
SHA256
fcf814a9152e92ca588184677fb3d37511e60c0aaae1e0ed73f10f8adafc4476
-
SHA512
0d5ca2f498a95b81061415d21b1e0ae6b607234c8fca2eae40c368682449358d3cd99cb3d6ef70296d7f7bd4116260bb8e81167c57030fc8d3bcdac0a8059e16
-
SSDEEP
12288:NNFG3kO2JtV+waCwKR1JaoqBXvQMdSnlzFAJaC:NNE0OQ4wRBRgdSnlzF
Malware Config
Signatures
Files
-
fcf814a9152e92ca588184677fb3d37511e60c0aaae1e0ed73f10f8adafc4476.exe windows x86
eac3f058bef35272ef5dd1d2911582d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
GetVersion
GetModuleHandleA
HeapCreate
lstrlenA
WaitForSingleObject
GetConsoleDisplayMode
WaitForMultipleObjects
GetTickCount
LoadLibraryExA
GetCommandLineA
ResumeThread
CompareFileTime
HeapReAlloc
GlobalUnlock
GlobalSize
SetLastError
InterlockedExchange
GetAtomNameA
VirtualProtect
GetUserDefaultLangID
user32
CreateIcon
FillRect
BeginPaint
SetForegroundWindow
ReleaseDC
GetCursorPos
GetWindow
wsprintfA
DrawTextA
AnyPopup
GetDC
ShowWindow
GetClassNameA
GetFocus
GetParent
DragDetect
FrameRect
EndPaint
GetTitleBarInfo
rastapi
DeviceDone
DeviceConnect
PortClose
DeviceListen
AddPorts
quartz
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ