Static task
static1
Behavioral task
behavioral1
Sample
fba44cd8700b6113c622a0f0b85608c553d4cc893f2949f7f60d7158393dbab1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fba44cd8700b6113c622a0f0b85608c553d4cc893f2949f7f60d7158393dbab1.exe
Resource
win10v2004-20220901-en
General
-
Target
fba44cd8700b6113c622a0f0b85608c553d4cc893f2949f7f60d7158393dbab1
-
Size
36KB
-
MD5
ab9f41513d56e8825b1634de2f82afa0
-
SHA1
4f8312ac3320fc4b08025a115066ff0b48dd0345
-
SHA256
fba44cd8700b6113c622a0f0b85608c553d4cc893f2949f7f60d7158393dbab1
-
SHA512
2a8d3d32bbdec9d78db6f2470afb9e8ce99bac9d7a072dc579475aab39a2748806835b695433a9bb7bfa42c609089baaa934e5c77db2dfe9e1fed56b63ecd380
-
SSDEEP
384:cyV5tdA+lZbr/66e2mKH13vfdHldhwLGEGs8R+D8t8lX5f0/t:cy5dA+DX/8KH13vfdHldhwyEgYlXx0l
Malware Config
Signatures
Files
-
fba44cd8700b6113c622a0f0b85608c553d4cc893f2949f7f60d7158393dbab1.exe windows x86
5bafb291df732bd8895bcff11e861198
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
SizeofResource
lstrlenW
LockResource
LoadResource
GetModuleHandleA
GetCommandLineA
FindResourceA
VirtualFree
ExitProcess
user32
GetMessageA
GetSystemMetrics
LoadCursorA
PostQuitMessage
ReleaseDC
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
GetDC
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
BitBlt
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ