Static task
static1
Behavioral task
behavioral1
Sample
fbbd1f2f35c3853d4b2dd63e471196650bc2803d7bf23b65d3f47f0b1c792b6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fbbd1f2f35c3853d4b2dd63e471196650bc2803d7bf23b65d3f47f0b1c792b6d.exe
Resource
win10v2004-20220812-en
General
-
Target
fbbd1f2f35c3853d4b2dd63e471196650bc2803d7bf23b65d3f47f0b1c792b6d
-
Size
68KB
-
MD5
20bee53c6c7eb5bb6cc5534058d9290c
-
SHA1
e7266096caa8d2a837ecbc42867d8e9d30265124
-
SHA256
fbbd1f2f35c3853d4b2dd63e471196650bc2803d7bf23b65d3f47f0b1c792b6d
-
SHA512
634ac3f701f185d4d79e4732c7c14f99a67513e6c6c52dc6f979e09e5dc3dfb91e812825a2042cb5b465c353959a00d42ab85b2f51ad614c6817da3547592ebf
-
SSDEEP
768:p2BkIh+GlkaZ99dOPLQ1+pkwikFpEWFu08t9qfAIpBNwII2aCqkqZUthrHk7UBPT:AwGlk8JKG2kEHBkIA/IIezqZU7DkRNQ
Malware Config
Signatures
Files
-
fbbd1f2f35c3853d4b2dd63e471196650bc2803d7bf23b65d3f47f0b1c792b6d.exe windows x86
9773d0a4c48d9e05d03bfb4a58124484
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
TlsAlloc
FindNextVolumeW
SetConsoleTitleW
GetModuleHandleA
GetCurrentProcess
DeleteFileW
lstrcpynA
lstrcpynA
SetCurrentDirectoryA
TlsGetValue
GetStartupInfoW
GetNumberFormatA
VirtualAlloc
lstrcpynA
GetLocaleInfoW
lstrlenA
lstrcpynA
TlsAlloc
CreateEventA
GetModuleFileNameW
lstrcpynA
GetFullPathNameA
vssapi
??0CVssWriter@@QAE@XZ
VssFreeSnapshotProperties
??1CVssWriter@@UAE@XZ
IsVolumeSnapshotted
Sections
.text Size: 11KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE