Static task
static1
Behavioral task
behavioral1
Sample
fe8603af968efec14f7d9994a6d9303b0418e60fe4e2dba0759c03759676abc5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fe8603af968efec14f7d9994a6d9303b0418e60fe4e2dba0759c03759676abc5.exe
Resource
win10v2004-20220812-en
General
-
Target
fe8603af968efec14f7d9994a6d9303b0418e60fe4e2dba0759c03759676abc5
-
Size
394KB
-
MD5
84926ca9e8c67f4c5bb17289ee16df10
-
SHA1
2ffcea808767457d766bf6d9bea91d5a106cc37d
-
SHA256
fe8603af968efec14f7d9994a6d9303b0418e60fe4e2dba0759c03759676abc5
-
SHA512
f7f55e05f33ed9c6c7c87f0898a22d204b7ae7d1ad4e6048ffbbb7f40039b350bc8d976710140ae077f7337f71c50afdf867dbef76ee6c611a94dcc67a1c43a1
-
SSDEEP
12288:6DNd9ZGh1fVqQt89e9fCzjPeJ/m9WY03xo0:GzZGPfsQRkzjUCl0xo
Malware Config
Signatures
Files
-
fe8603af968efec14f7d9994a6d9303b0418e60fe4e2dba0759c03759676abc5.exe windows x86
864d036555b4042cfd18c8263d4b3065
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
GetFileAttributesA
lstrlenW
GetPriorityClass
WriteConsoleW
GetModuleHandleA
GetLastError
SetEvent
WriteConsoleW
CloseHandle
WriteConsoleW
GetStdHandle
GetCurrentDirectoryA
CreatePipe
lstrcpyW
DisconnectNamedPipe
SuspendThread
HeapCreate
IsDebuggerPresent
ClearCommBreak
CopyFileW
msftedit
RichComboBoxWndProc
RichListBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
shell32
SHGetMalloc
DragAcceptFiles
DllUnregisterServer
DragQueryFileA
StrChrA
SHFree
ShellMessageBoxA
SHGetDiskFreeSpaceA
ExtractIconA
DuplicateIcon
DragFinish
SHGetSettings
ShellAboutA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ