Static task
static1
Behavioral task
behavioral1
Sample
fe084d79bf07d8cda9d681ee5b7bef75ff99a5f364fd72d2a4763188a7a76c9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe084d79bf07d8cda9d681ee5b7bef75ff99a5f364fd72d2a4763188a7a76c9c.exe
Resource
win10v2004-20220812-en
General
-
Target
fe084d79bf07d8cda9d681ee5b7bef75ff99a5f364fd72d2a4763188a7a76c9c
-
Size
116KB
-
MD5
77d433a1a355438be5f2ecff8f7a3351
-
SHA1
b232773ce2f764588661425f398b8ede0db3feb2
-
SHA256
fe084d79bf07d8cda9d681ee5b7bef75ff99a5f364fd72d2a4763188a7a76c9c
-
SHA512
e00b77ddcf2c399b55a61d6254342e985e4d24a5f2f0f979f9b8961e3b66c25cab40f74a53191fb7d4b6d3ad4f88edacbc471411c6fdb9d69cc15c0f5017c9c4
-
SSDEEP
3072:yQA/mOQIB4adLBix+nuvS40jOlarSZ/hpqzK:yQA/mfULBvh4xYmhpqz
Malware Config
Signatures
Files
-
fe084d79bf07d8cda9d681ee5b7bef75ff99a5f364fd72d2a4763188a7a76c9c.exe windows x86
5812a5e1a66d9030d8d3b3841dd7f6ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
SetSystemTime
CopyFileA
ResumeThread
GetStartupInfoA
GetVersion
GetModuleHandleA
GetModuleFileNameA
CloseHandle
VirtualFreeEx
GetCurrentThreadId
GetTickCount
user32
PostThreadMessageA
GetMessageA
GetInputState
shell32
SHGetSpecialFolderPathA
shlwapi
SHSetValueA
SHDeleteValueA
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
strcat
memset
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z
??2@YAPAXI@Z
memcpy
memcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mysec Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ