Static task
static1
Behavioral task
behavioral1
Sample
fcd81d9dc82d55b2d8fc87248c52a3a4174fdb7607197008bc400ee0cbcba2ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcd81d9dc82d55b2d8fc87248c52a3a4174fdb7607197008bc400ee0cbcba2ed.exe
Resource
win10v2004-20220901-en
General
-
Target
fcd81d9dc82d55b2d8fc87248c52a3a4174fdb7607197008bc400ee0cbcba2ed
-
Size
300KB
-
MD5
4e2def21c6af53e732c8db2a885c98c0
-
SHA1
1edd25108d74d96ae8c07bde5c0d83db642dd0a6
-
SHA256
fcd81d9dc82d55b2d8fc87248c52a3a4174fdb7607197008bc400ee0cbcba2ed
-
SHA512
8f6b35be470a9777f413af48aa31a9a4728675fea6ee95594e64ac380483de36cdd397a7ad7e4726190c999fccf00dde0b253f6e84a63c01ec9542483417ee34
-
SSDEEP
6144:o0Wnn9ZnmBLhYnkm591m5HII3WwZpBd484Xcc:On90f7oIGwcXc
Malware Config
Signatures
Files
-
fcd81d9dc82d55b2d8fc87248c52a3a4174fdb7607197008bc400ee0cbcba2ed.exe windows x86
58e1a56f8788a26d5b004b982556627e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeThread
GetCommandLineA
FindClose
GetProcessHeap
IsBadWritePtr
HeapSize
VirtualProtect
GetModuleHandleA
CreateDirectoryA
MapViewOfFile
IsValidCodePage
CancelIo
RemoveDirectoryA
CreateMailslotW
ResetEvent
GetStdHandle
GetLocaleInfoA
GetDriveTypeW
FindResourceA
SetLastError
GetFileAttributesA
user32
PeekMessageA
SetCursor
GetWindowLongW
PostMessageW
GetWindowTextW
IsDialogMessageA
SetFocus
DispatchMessageA
LoadImageW
LoadCursorA
wsprintfA
DestroyMenu
GetCapture
ipsmsnap
DllUnregisterServer
DllGetClassObject
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ