Static task
static1
Behavioral task
behavioral1
Sample
fc3410d79496b2036738294531fe0d38fd1fe9867a47ace6af205bc318492cec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fc3410d79496b2036738294531fe0d38fd1fe9867a47ace6af205bc318492cec.exe
Resource
win10v2004-20220901-en
General
-
Target
fc3410d79496b2036738294531fe0d38fd1fe9867a47ace6af205bc318492cec
-
Size
63KB
-
MD5
eda5a57b6a64e2bae2937a753105871f
-
SHA1
7c8f99e4052d881b02ce5b6c3169711d327427c0
-
SHA256
fc3410d79496b2036738294531fe0d38fd1fe9867a47ace6af205bc318492cec
-
SHA512
e2645652b63b1a2a489eb3805cfd466a58df773d8fc690a6a32ac9338ddddc1b4f64b8353e530cb49e5c2481158eeff0ef1384bfe0842e30a80b8efed96a499a
-
SSDEEP
1536:T9Ya+VZpaDsX/tICos7Kemp6s9MEomv2gD:T97DsXDos7y6qOc
Malware Config
Signatures
Files
-
fc3410d79496b2036738294531fe0d38fd1fe9867a47ace6af205bc318492cec.exe windows x86
60d8002e22a318871ca781fdbaea1b1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
HeapCreate
CreateFileA
GetModuleHandleW
CreateEventA
FindClose
ReadConsoleW
GetCurrentDirectoryW
GetStringTypeA
GetVolumePathNameW
CreateSemaphoreA
GetFullPathNameW
FindClose
CreateMailslotA
CreatePipe
Sleep
CreateFileMappingA
SetVolumeLabelA
GetEnvironmentVariableW
GetModuleHandleA
GetFullPathNameW
FindClose
CopyFileA
mshtml
ShowModalDialog
DllGetClassObject
PrintHTML
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ