Static task
static1
Behavioral task
behavioral1
Sample
fe97cd8cb22eae18afbe1e43ceea2aa938c317952f895e823a9f9744024cb160.exe
Resource
win7-20220812-en
General
-
Target
fe97cd8cb22eae18afbe1e43ceea2aa938c317952f895e823a9f9744024cb160
-
Size
81KB
-
MD5
42ced190e34c24173b68929c54b18042
-
SHA1
ce529d6a2c8d42dafb3caf9461ab34e04dcbdb9b
-
SHA256
fe97cd8cb22eae18afbe1e43ceea2aa938c317952f895e823a9f9744024cb160
-
SHA512
8ec100b264f0e9dd3a16c864eaa18bdb315d5353597618897e8aa441f1dcef9447ef05c9b1689610e836c2fb1160e6251d13946ef1a0b3451b8faf2eb45ed552
-
SSDEEP
1536:UhICOoMlUbM8+ekju7iR8enyirq0Re5RpmzIOOlbPK71aTVZsF5uDSE:UhWoOoMikjtRbGT0zKl0CVkuDSE
Malware Config
Signatures
Files
-
fe97cd8cb22eae18afbe1e43ceea2aa938c317952f895e823a9f9744024cb160.exe windows x86
be9c05d4ab18f295be8349ad9c8d2fdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
lstrcatW
FindFirstFileW
lstrcpyW
RemoveDirectoryW
CreateProcessW
SetCurrentDirectoryW
CopyFileW
GetTempPathW
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentDirectoryW
FindNextFileW
CloseHandle
GetLastError
CreateFileW
WaitForSingleObject
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
GetModuleHandleW
FindClose
MoveFileExW
GetThreadLocale
lstrlenW
LCMapStringW
GetStartupInfoW
user32
DefWindowProcW
RegisterWindowMessageW
wsprintfW
DialogBoxParamW
GetActiveWindow
MessageBoxW
CheckDlgButton
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
SendMessageW
SetWindowLongW
IsDlgButtonChecked
EndDialog
GetWindowLongW
advapi32
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoInitialize
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
??3@YAXPAX@Z
wcslen
wcsncpy
wcscat
wcsrchr
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE