Static task
static1
Behavioral task
behavioral1
Sample
fbeb51389c0da165a3f0c9bc2f40d51ccb246bfde165128703dcc21feb49de43.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fbeb51389c0da165a3f0c9bc2f40d51ccb246bfde165128703dcc21feb49de43.exe
Resource
win10v2004-20220812-en
General
-
Target
fbeb51389c0da165a3f0c9bc2f40d51ccb246bfde165128703dcc21feb49de43
-
Size
185KB
-
MD5
91f4b1a0d554ccfca82a9bc4cdb55090
-
SHA1
2e15240c8b9dbbf10d25c2dc6de79f4a408fe78f
-
SHA256
fbeb51389c0da165a3f0c9bc2f40d51ccb246bfde165128703dcc21feb49de43
-
SHA512
b26d1fac34f90573a7bf4375d65fa13bc308e3cb2afdc7436d20c63fc232f5ff9c5abb4b47b69e7a8aad50608134da55202b53264a1288047bd8114a871c6426
-
SSDEEP
3072:YJ2sagiMkRPMfqkjl4jJ4aZ2Es2lhPmc63UgQUN7DqZ/JGu4I6+2g:Yos/iMkRPMSkc2Bsc3UghoZ/J3CHg
Malware Config
Signatures
Files
-
fbeb51389c0da165a3f0c9bc2f40d51ccb246bfde165128703dcc21feb49de43.exe windows x86
1f9d26c9f1930f00367fdb505f9c2b0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageA
GetModuleHandleA
CloseHandle
MultiByteToWideChar
CreateFileA
DeleteFileA
WriteFile
SystemTimeToFileTime
GetSystemTime
GetCPInfo
SetFilePointer
GetFileSize
GetLastError
ReadFile
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
msacm32
acmStreamConvert
acmFormatDetailsA
acmFormatTagDetailsA
acmStreamClose
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamSize
acmStreamOpen
acmFormatSuggest
winmm
mmioClose
mmioSeek
mmioOpenA
mmioDescend
mmioRead
mmioAscend
rpcrt4
UuidCreate
user32
CharToOemA
LoadStringA
msvcrt
tmpnam
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
sscanf
fclose
fgets
fopen
_ftol
_mbscpy
_mbslen
_stricmp
_mbsicmp
strrchr
wcscpy
wcslen
wcscmp
_purecall
_CxxThrowException
__CxxFrameHandler
_EH_prolog
strncpy
_mbsrchr
sprintf
calloc
free
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE