Static task
static1
Behavioral task
behavioral1
Sample
fbf997e727909f2f54f84548ea8682dfbbb31232afc8115daf651f7a64b9bd1d.exe
Resource
win7-20220812-en
General
-
Target
fbf997e727909f2f54f84548ea8682dfbbb31232afc8115daf651f7a64b9bd1d
-
Size
198KB
-
MD5
a1b598f55ed363104612d9a87f4978e0
-
SHA1
7b9cc041fe39f5cf718b6d7cfe8bb5461d7b6517
-
SHA256
fbf997e727909f2f54f84548ea8682dfbbb31232afc8115daf651f7a64b9bd1d
-
SHA512
a7d2d95cbd4ca4b0c1051207217e70c9fb5e88d01a3b14562133d3cc5e324fad04233e953a300b0a47f013a353eeb562a85c39d9db2a57500fe16efcd4c553f8
-
SSDEEP
3072:+ZNQ+fbJmn2NWOAsnE5zsTFAZ2Ci76jS1Z9A/PElYxiwaa:+ZNQmbJmWoR2ZZ9AU7waa
Malware Config
Signatures
Files
-
fbf997e727909f2f54f84548ea8682dfbbb31232afc8115daf651f7a64b9bd1d.exe windows x86
57572506c846cacc717847c9c093bdc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
CM_Get_First_Log_Conf
CM_Get_DevNode_Status
CM_Free_Res_Des_Handle
SetupDiGetDeviceInterfaceDetailW
CM_Get_Device_IDW
CM_Get_Parent
SetupDiEnumDeviceInterfaces
CM_Get_Res_Des_Data_Size
SetupDiGetDeviceRegistryPropertyW
CM_Get_Res_Des_Data
CM_Get_Next_Res_Des
SetupDiDestroyDeviceInfoList
winmm
timeBeginPeriod
timeEndPeriod
kernel32
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
SizeofResource
CloseHandle
DeviceIoControl
FindResourceExW
GetExitCodeThread
LockResource
FindResourceW
CreateFileW
LoadResource
InterlockedDecrement
RaiseException
MultiByteToWideChar
CreateEventW
WaitForSingleObject
SetEvent
CreateThread
WaitForMultipleObjects
InitializeCriticalSection
DeleteCriticalSection
LocalAlloc
CreateWaitableTimerW
EnterCriticalSection
LocalFree
LeaveCriticalSection
SetWaitableTimer
Sleep
GetConsoleMode
GetConsoleCP
SetFilePointer
lstrlenA
GetStartupInfoA
QueryPerformanceCounter
GetLastError
HeapSize
GetStringTypeW
GetStringTypeA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
GetModuleFileNameW
GetProcessHeap
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetTickCount
user32
RegisterDeviceNotificationW
UnregisterDeviceNotification
UnregisterClassA
advapi32
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
SetServiceStatus
ole32
StringFromGUID2
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
VariantChangeType
SysFreeString
SafeArrayAccessData
VariantInit
SafeArrayUnaccessData
VariantClear
SysAllocString
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE