Static task
static1
Behavioral task
behavioral1
Sample
fc7784de4327c71317b15e360ccf902dae81125feb52b4d683eccfd087a3ee56.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc7784de4327c71317b15e360ccf902dae81125feb52b4d683eccfd087a3ee56.exe
Resource
win10v2004-20220901-en
General
-
Target
fc7784de4327c71317b15e360ccf902dae81125feb52b4d683eccfd087a3ee56
-
Size
704KB
-
MD5
a85db4e2d4b8673803b86336023c1dfc
-
SHA1
d75b854b064518a050962d1eb34c02c734d1e60d
-
SHA256
fc7784de4327c71317b15e360ccf902dae81125feb52b4d683eccfd087a3ee56
-
SHA512
a242fd4e2198b150ff7425a0a55f6ed39814bda7e3ced5787749d404da6fd264b4b6b9757c8e550455bcc42560f921dfa4c1054a54c7a215c3f33e790b569bb0
-
SSDEEP
12288:CAcvPZntjC/MIWb+2heYSezgdIVzqRkkRCuQU73vaktxy:CVnO//U+WeJeLVeRB5a3
Malware Config
Signatures
Files
-
fc7784de4327c71317b15e360ccf902dae81125feb52b4d683eccfd087a3ee56.exe windows x86
e7ac9a244a554c874292012f1bda7d9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeCreateStringHandleW
GetShellWindow
WindowFromPoint
ShowCursor
RegisterClassA
UnregisterClassA
MapVirtualKeyExA
IntersectRect
IsCharLowerW
LoadCursorFromFileW
NotifyWinEvent
SwitchToThisWindow
PtInRect
GetClassNameA
DdeSetQualityOfService
RealGetWindowClass
SetClipboardViewer
LoadIconA
EditWndProc
DrawStateW
CharLowerA
IsDialogMessage
UnhookWindowsHookEx
RegisterClassExA
wininet
InternetDialA
UnlockUrlCacheEntryFileA
FtpSetCurrentDirectoryW
HttpOpenRequestW
InternetQueryOptionA
GopherGetAttributeW
FindFirstUrlCacheContainerW
gdi32
GetPixel
SetICMProfileA
CreateHatchBrush
GetCharABCWidthsA
ExtCreateRegion
StartDocW
GetCharWidthA
GetObjectA
IntersectClipRect
StrokePath
gdiPlaySpoolStream
SetMagicColors
DeleteDC
Chord
CreateFontIndirectW
CreateDCA
GetRegionData
OffsetWindowOrgEx
CreateRectRgn
GetDeviceCaps
SetTextAlign
EnableEUDC
AbortPath
comctl32
InitCommonControlsEx
ImageList_DrawIndirect
ImageList_Write
CreatePropertySheetPageW
CreateMappedBitmap
CreatePropertySheetPageA
ImageList_Read
kernel32
SetFilePointer
WideCharToMultiByte
TerminateProcess
ReadConsoleOutputA
SetHandleCount
QueryPerformanceCounter
InitializeCriticalSection
SetEnvironmentVariableA
GetModuleFileNameA
FreeEnvironmentStringsW
MultiByteToWideChar
TlsFree
GetDiskFreeSpaceExW
GetCurrentProcess
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetTempPathW
GetThreadPriority
GetNamedPipeInfo
GetOEMCP
GetUserDefaultLCID
CreateMutexA
LCMapStringW
AddAtomA
CloseHandle
GetTickCount
IsValidLocale
FillConsoleOutputAttribute
EnterCriticalSection
GetProcessHeap
GetCurrentDirectoryW
VirtualAlloc
ReadConsoleA
SetComputerNameW
GetConsoleOutputCP
IsValidCodePage
LoadLibraryA
RtlUnwind
SetLocaleInfoW
LeaveCriticalSection
GetStdHandle
GetDiskFreeSpaceA
SetConsoleTextAttribute
EnumResourceTypesA
HeapSize
HeapAlloc
TlsSetValue
GetTimeFormatA
OpenMutexA
lstrcat
GetFileType
GlobalLock
GetCurrentThread
FreeEnvironmentStringsA
FreeLibraryAndExitThread
GetExitCodeProcess
GetCurrentProcessId
AllocConsole
GetACP
DuplicateHandle
GetVersionExA
SetConsoleCursorInfo
GetCommandLineA
GetCurrentThreadId
lstrcpy
UnhandledExceptionFilter
HeapReAlloc
GetLocaleInfoA
GlobalFix
GetSystemInfo
RtlMoveMemory
IsBadWritePtr
HeapCreate
CompareStringA
GetEnvironmentStrings
HeapFree
GetModuleHandleA
HeapDestroy
ReadFile
LocalFileTimeToFileTime
GetStringTypeA
ExitProcess
CreateFileMappingW
GetDateFormatA
CompareStringW
SetFileTime
GetLocaleInfoW
SetStdHandle
GetProcAddress
TlsGetValue
EnumSystemLocalesA
FlushFileBuffers
OpenFile
TlsAlloc
WriteFile
GetCPInfo
GetStartupInfoA
InterlockedExchange
VirtualProtect
SetLastError
DeleteCriticalSection
VirtualFree
VirtualQuery
GetStringTypeW
GetTimeZoneInformation
GetLastError
LCMapStringA
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 460KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ