Static task
static1
Behavioral task
behavioral1
Sample
f2bbcaf4d5c4183ab60cd637bd12dcdbaaa4d365930c20dfd1cf0cf47068a92a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2bbcaf4d5c4183ab60cd637bd12dcdbaaa4d365930c20dfd1cf0cf47068a92a.exe
Resource
win10v2004-20220901-en
General
-
Target
f2bbcaf4d5c4183ab60cd637bd12dcdbaaa4d365930c20dfd1cf0cf47068a92a
-
Size
374KB
-
MD5
16ad95a494c27b83dc473a7257a2ef3a
-
SHA1
f40a7c458ad4f96e0e3b78bb7df307fd03f185bc
-
SHA256
f2bbcaf4d5c4183ab60cd637bd12dcdbaaa4d365930c20dfd1cf0cf47068a92a
-
SHA512
2f853be3a12ee405a1d9a862a658ff07216f3b98d06eb7d650c04d9ea284c5025275e82f15d659a3c16ec0302e469fb27d954ca65487e086ed9eb3156d8f0ea6
-
SSDEEP
6144:yRMPKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1KpXPur:yRMJL9/u5Wcxr8/frTzcNS0G3fDsf1YU
Malware Config
Signatures
Files
-
f2bbcaf4d5c4183ab60cd637bd12dcdbaaa4d365930c20dfd1cf0cf47068a92a.exe windows x86
77590b6906538e26081bff94a8b203f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
CreateEventW
FindAtomA
lstrlenW
GetPrivateProfileStringA
GetDriveTypeW
LocalFree
GetCurrentThreadId
GetConsoleAliasA
ReadFile
InitializeCriticalSection
HeapCreate
LocalFlags
SuspendThread
TlsGetValue
FindClose
GetCurrentProcessId
GetNumberFormatA
ResumeThread
LoadLibraryW
user32
GetSysColor
CallWindowProcW
GetKeyboardType
GetClassInfoA
IsWindow
SetFocus
DrawTextA
GetSysColor
EndDialog
DrawStateW
DispatchMessageA
GetClientRect
CreateWindowExA
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ