Static task
static1
Behavioral task
behavioral1
Sample
fc731c774ed257620b059040c8173f5ea65eba23ad7f99105d475091a9f81260.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc731c774ed257620b059040c8173f5ea65eba23ad7f99105d475091a9f81260.exe
Resource
win10v2004-20221111-en
General
-
Target
fc731c774ed257620b059040c8173f5ea65eba23ad7f99105d475091a9f81260
-
Size
344KB
-
MD5
3359acb36eb537c461fc501eee3c7321
-
SHA1
1c5fae3ebd699e137906a2e9ea67335eb082221d
-
SHA256
fc731c774ed257620b059040c8173f5ea65eba23ad7f99105d475091a9f81260
-
SHA512
c9d56e5009d2282bb3d39bd0d3621154c89cd97fff14a151400b5469a62e725de67bc5ad6928389a026291760d78e194cd8e03938c2646fb8e3767a35c989a35
-
SSDEEP
6144:lwBpL/gLvlvZ7gZn46CcbGpVxoJpdXjZgYHSCue:lktoLvlh7SdbYVxoDg
Malware Config
Signatures
Files
-
fc731c774ed257620b059040c8173f5ea65eba23ad7f99105d475091a9f81260.exe windows x86
71c1c1a673a1a8a74ef6dbf41225a1a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegConnectRegistryA
CryptHashData
CryptReleaseContext
RegCreateKeyExW
RegEnumKeyExA
CryptAcquireContextA
comctl32
CreateUpDownControl
ImageList_GetBkColor
ImageList_SetFlags
ImageList_SetDragCursorImage
ImageList_Draw
CreateStatusWindow
ImageList_DrawIndirect
ImageList_ReplaceIcon
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_GetImageRect
ImageList_AddMasked
DrawStatusTextW
DrawStatusText
GetEffectiveClientRect
MakeDragList
ImageList_DragMove
ImageList_DrawEx
ImageList_Copy
CreateToolbar
user32
GetClipboardFormatNameA
GetMenuItemInfoA
GetGuiResources
RegisterClassA
GetPropA
OpenIcon
RegisterClassExA
ExcludeUpdateRgn
MessageBoxA
GetPropW
EditWndProc
wininet
InternetCreateUrlW
InternetLockRequestFile
FtpGetFileSize
InternetTimeToSystemTime
FindFirstUrlCacheGroup
FtpCreateDirectoryA
CommitUrlCacheEntryA
InternetReadFile
InternetReadFileExA
shell32
SHEmptyRecycleBinA
SHBrowseForFolder
SHUpdateRecycleBinIcon
comdlg32
FindTextA
GetOpenFileNameA
FindTextW
PageSetupDlgA
kernel32
WriteConsoleW
HeapReAlloc
GetConsoleMode
InterlockedDecrement
GetStdHandle
FreeEnvironmentStringsW
GetDateFormatA
FreeEnvironmentStringsA
GetCPInfo
EnumCalendarInfoA
GetCurrentProcess
GetTimeFormatA
ExitProcess
MultiByteToWideChar
IsDebuggerPresent
GetLocaleInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TlsSetValue
VirtualFree
IsValidCodePage
CreateMutexA
TlsGetValue
LCMapStringA
LCMapStringW
GetConsoleCP
GetFullPathNameA
WideCharToMultiByte
HeapDestroy
SetLastError
GetOEMCP
CompareStringW
InterlockedIncrement
GetTimeZoneInformation
SetStdHandle
CreateFileA
FlushFileBuffers
GetUserDefaultLCID
GetCurrentProcessId
TerminateProcess
LoadLibraryA
ReleaseMutex
GetFileType
GetLocaleInfoW
GetStringTypeW
TlsFree
WriteConsoleA
FreeLibrary
OpenMutexA
GetCommandLineA
SetConsoleCtrlHandler
GetConsoleOutputCP
Sleep
GetLastError
SetHandleCount
GetEnvironmentStrings
HeapAlloc
VirtualAlloc
TlsAlloc
GetProcAddress
UnhandledExceptionFilter
GetModuleHandleA
GlobalGetAtomNameW
VirtualQuery
WriteConsoleInputW
GetTickCount
GetModuleFileNameA
SetUnhandledExceptionFilter
HeapSize
GetStringTypeA
GetACP
SetFilePointer
GetEnvironmentStringsW
ReadFile
CompareStringA
QueryPerformanceCounter
InterlockedExchange
LeaveCriticalSection
SetEnvironmentVariableA
HeapCreate
WriteFile
RtlUnwind
CloseHandle
GetStartupInfoA
EnumSystemLocalesA
DeleteCriticalSection
GetCurrentThread
EnterCriticalSection
IsValidLocale
HeapFree
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
Sections
.text Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ