Static task
static1
Behavioral task
behavioral1
Sample
fd9d8e3d60085ae9f05c92000da107442d67546330bb852ae5f2777ffa6fa465.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fd9d8e3d60085ae9f05c92000da107442d67546330bb852ae5f2777ffa6fa465.exe
Resource
win10v2004-20220812-en
General
-
Target
fd9d8e3d60085ae9f05c92000da107442d67546330bb852ae5f2777ffa6fa465
-
Size
140KB
-
MD5
72b157a9462ca6b8e88d604cafa2c199
-
SHA1
499b3d2177f70207668ff74bbe41496374d4a40f
-
SHA256
fd9d8e3d60085ae9f05c92000da107442d67546330bb852ae5f2777ffa6fa465
-
SHA512
69621f05c7c5721f08b38e05b772de1aafd65e62e0d0624107eb180e813649f9c8b4c520a04c23d51bcaa0161514e5383645cd7f800bf37cc24d60e9fff7f66b
-
SSDEEP
1536:8OmbBWRChGP8cwMc9ZEACh8yYez3Sz5BXYDFmDL7snImUjgFN0ymJqqm/UHXQF2P:8Bw9PZwDdCh8peziz55mpI5HXS22S
Malware Config
Signatures
Files
-
fd9d8e3d60085ae9f05c92000da107442d67546330bb852ae5f2777ffa6fa465.exe windows x86
ffb0dd10b603cd34eb48acaf70dbe38d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
lstrcmpiA
GetTickCount
TerminateProcess
OpenProcess
MultiByteToWideChar
lstrlenA
FreeLibrary
GetSystemDirectoryA
SetFileTime
SystemTimeToFileTime
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
WinExec
GetModuleFileNameA
GetEnvironmentVariableA
UnmapViewOfFile
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
LoadLibraryExA
GlobalAlloc
SetFileAttributesA
CopyFileA
DeleteFileA
MoveFileA
FindNextFileA
FindFirstFileA
GlobalFree
GetTempPathA
MoveFileExA
Sleep
GetVersionExA
GetWindowsDirectoryA
WaitForSingleObject
CreateThread
GetCurrentThreadId
GetLastError
DeviceIoControl
msvcrt
strlen
_strnicmp
sprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
wcslen
memcpy
strcat
strcpy
_wcsnicmp
swprintf
wcscpy
fclose
fseek
fwrite
fopen
strcmp
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ