Static task
static1
Behavioral task
behavioral1
Sample
fb5f7782ebb994fb80abfb059cd50b0bd66c2175225e1ac42252a76a466c9957.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb5f7782ebb994fb80abfb059cd50b0bd66c2175225e1ac42252a76a466c9957.exe
Resource
win10v2004-20220901-en
General
-
Target
fb5f7782ebb994fb80abfb059cd50b0bd66c2175225e1ac42252a76a466c9957
-
Size
230KB
-
MD5
718cb9a0325b8f5ba554d9759f20f440
-
SHA1
0b12b6df2982867dbcf5718fc0824232a095ac2f
-
SHA256
fb5f7782ebb994fb80abfb059cd50b0bd66c2175225e1ac42252a76a466c9957
-
SHA512
973a0e2ad99ea2edd1ab7ec6c3f2f2cd42d4b7b8014858ad0c58a4876f389a13e002a2e3977454e056b19e35ff732def49de5c30aa9cb844dacf3d2662b0c5d4
-
SSDEEP
6144:EjEfgLNTBMZPRSmRHdZT9mJ20CV9tzF3lDuq/:zCBMXS6L9m/CLlu
Malware Config
Signatures
Files
-
fb5f7782ebb994fb80abfb059cd50b0bd66c2175225e1ac42252a76a466c9957.exe windows x86
1d986849187740b562d6c57a2d6c4b13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
DisconnectNamedPipe
GlobalFix
CreateDirectoryW
GetBinaryTypeW
SearchPathA
GetCurrentThread
GlobalUnlock
ResetEvent
FindFirstFileExW
GlobalDeleteAtom
CreateNamedPipeW
HeapValidate
BackupRead
SetFileApisToANSI
OutputDebugStringW
UnlockFile
SetComputerNameA
LocalReAlloc
FlushFileBuffers
FatalAppExitW
GetDiskFreeSpaceExW
BuildCommDCBAndTimeoutsW
WaitForSingleObject
OpenFile
VirtualAlloc
ReadFile
GetFileAttributesExW
GetProcAddress
LoadLibraryA
WaitNamedPipeW
SetCommTimeouts
TlsFree
GetStringTypeA
LCMapStringW
GetStringTypeW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
user32
IsCharAlphaNumericW
ShowScrollBar
GetWindowWord
EnableMenuItem
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ