Static task
static1
Behavioral task
behavioral1
Sample
fcd3b2e317c00f06794107f3f6f568238941aa62967873fd083cbaa4d1ad2a88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcd3b2e317c00f06794107f3f6f568238941aa62967873fd083cbaa4d1ad2a88.exe
Resource
win10v2004-20220901-en
General
-
Target
fcd3b2e317c00f06794107f3f6f568238941aa62967873fd083cbaa4d1ad2a88
-
Size
614KB
-
MD5
e478bea457aafad22c3c7c37ac6f240e
-
SHA1
8931863ca4141244623950acb5cb7ab67e5d97e8
-
SHA256
fcd3b2e317c00f06794107f3f6f568238941aa62967873fd083cbaa4d1ad2a88
-
SHA512
631e4eb430d4f9017f8fbb6cf23a4530c7437791932266f89b161e6bc75625532f04abbb056ea3e23f7aff818be5946e9bcfee52c0c767fe3d73f8e8f5e12d24
-
SSDEEP
12288:WZLwrTd+z4fGp3OfBofQ1iX/math/rgYdB4mklf3Ys6Mcw9Lk5C76pSfkYP8:WZLqMpfh+AlBShf3R6E9iCOAkYP8
Malware Config
Signatures
Files
-
fcd3b2e317c00f06794107f3f6f568238941aa62967873fd083cbaa4d1ad2a88.exe windows x86
5a36a1f8d2ecf51b960e32d735e9ca2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
GetExitCodeThread
WaitForSingleObject
CreateThread
GetLastError
SystemTimeToFileTime
GetLocalTime
GetFileAttributesW
CreateDirectoryW
VirtualFree
GetModuleHandleW
GetProcAddress
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceExA
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
MultiByteToWideChar
GetLocaleInfoW
lstrlenA
lstrcmpiW
GetEnvironmentVariableW
GlobalMemoryStatusEx
VirtualAlloc
WideCharToMultiByte
ExpandEnvironmentStringsW
lstrcmpW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
CompareFileTime
GetSystemTimeAsFileTime
Sleep
GetTempPathW
SetEnvironmentVariableW
CloseHandle
WriteFile
CreateFileW
GetDriveTypeW
SetCurrentDirectoryW
GetExitCodeProcess
GetModuleFileNameW
GetCommandLineW
GetVersionExW
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
MulDiv
TerminateThread
ResumeThread
SuspendThread
LocalFree
lstrcpyW
FormatMessageW
GetSystemDirectoryW
DeleteCriticalSection
GetFileSize
SetFilePointer
ReadFile
SetFileTime
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GetModuleHandleA
SetLastError
SetFileAttributesW
GetDiskFreeSpaceExW
lstrcatW
ExitProcess
lstrlenW
GetStartupInfoA
user32
EndDialog
CharUpperW
SetTimer
DestroyWindow
KillTimer
DispatchMessageW
wsprintfW
GetSystemMenu
EnableMenuItem
IsWindow
EnableWindow
MessageBeep
LoadIconW
LoadImageW
wvsprintfW
DefWindowProcW
CallWindowProcW
GetWindowDC
DrawIconEx
DialogBoxIndirectParamW
GetWindow
ClientToScreen
GetDC
DrawTextW
ReleaseDC
ShowWindow
SetWindowPos
SystemParametersInfoW
SetFocus
GetWindowLongW
SetWindowLongW
GetSystemMetrics
GetClientRect
GetDlgItem
GetKeyState
wsprintfA
MessageBoxA
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
GetMessageW
GetWindowRect
ScreenToClient
CreateWindowExW
SendMessageW
GetParent
gdi32
CreateFontIndirectW
SelectObject
GetDeviceCaps
GetObjectW
DeleteObject
shell32
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetMalloc
ole32
CoCreateInstance
CoInitialize
oleaut32
VariantClear
SysAllocString
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_beginthreadex
_EH_prolog
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
memset
_wcsnicmp
memcpy
malloc
memmove
_wtol
free
memcmp
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_controlfp
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ