Static task
static1
Behavioral task
behavioral1
Sample
fbcee3c0f30bc0a6f8792f56e98899ba13e4f36b6c51cd239bed0d6b342436da.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fbcee3c0f30bc0a6f8792f56e98899ba13e4f36b6c51cd239bed0d6b342436da.exe
Resource
win10v2004-20220901-en
General
-
Target
fbcee3c0f30bc0a6f8792f56e98899ba13e4f36b6c51cd239bed0d6b342436da
-
Size
291KB
-
MD5
8185e0b4432c21b9cac81e7b7b5d7afb
-
SHA1
c995c4b82be1cbaa92ae32cd767c9098c1cbc60f
-
SHA256
fbcee3c0f30bc0a6f8792f56e98899ba13e4f36b6c51cd239bed0d6b342436da
-
SHA512
2e9b0740f90e9cdf3826d8f867df063d3c9b527eb1a8f9d3756ae484744dbe0b9b7b502fb83238cc03b07b5c39af33f81a7684a5f162ce853fccede315dfdf80
-
SSDEEP
6144:RrYs0bnfyePw1uWo66akOuwqPPIVjsOqoxb2UuC8xrZP7B9VEwMjwojxp:RkzfhPUYakOBqo5stDUR8xrNFEwM3Np
Malware Config
Signatures
Files
-
fbcee3c0f30bc0a6f8792f56e98899ba13e4f36b6c51cd239bed0d6b342436da.exe windows x86
436a3762dbe4aa16dd287719c1b2d510
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
GetModuleHandleA
HeapDestroy
CancelIo
AddAtomW
Sleep
lstrcpyA
GetFileAttributesA
lstrlenW
GetStartupInfoA
GetProcessHeap
CopyFileA
WriteConsoleW
WriteConsoleW
SetEvent
VirtualProtect
WriteConsoleW
GetDriveTypeW
GetPrivateProfileSectionW
VirtualQueryEx
GetCommandLineA
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
uxtheme
GetThemeSysSize
GetThemeBool
IsThemeActive
GetThemeTextMetrics
DrawThemeEdge
OpenThemeData
CloseThemeData
DrawThemeBackground
CloseThemeData
GetWindowTheme
GetThemeTextExtent
SetWindowTheme
GetThemeColor
Sections
.text Size: 1024B - Virtual size: 855B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impexp Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ