Static task
static1
Behavioral task
behavioral1
Sample
fba191484a3f0e69d753fe3fb49607f50e55a29924626a8578820a1d3fc94c2c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fba191484a3f0e69d753fe3fb49607f50e55a29924626a8578820a1d3fc94c2c.exe
Resource
win10v2004-20220812-en
General
-
Target
fba191484a3f0e69d753fe3fb49607f50e55a29924626a8578820a1d3fc94c2c
-
Size
178KB
-
MD5
cd71a536fa269bac132a0e6ec49b9cb9
-
SHA1
999211ae5740a91de436843928f46ea4304a30b0
-
SHA256
fba191484a3f0e69d753fe3fb49607f50e55a29924626a8578820a1d3fc94c2c
-
SHA512
875be4e10dc3194fa3f6cbc4c7b111e9e3745419397a3a1d2149a538c6e3fb7d20e53b0bee4358621dfdd99654cc53f7604cc216154aef87d21ece487bf747e4
-
SSDEEP
3072:ST+PzecO+bW/phOhzSPkMYWdH9kXID+PIqm2v4XNlMUhR44Y6j5W3UFKoL7KwkCD:SP+MhctPWpsAqp4jMUhRTY69WkjeCj/
Malware Config
Signatures
Files
-
fba191484a3f0e69d753fe3fb49607f50e55a29924626a8578820a1d3fc94c2c.exe windows x86
b73de245235e2e0f394a8022cac62c63
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GetAtomNameW
GetCurrentProcess
InterlockedExchange
QueryPerformanceCounter
UnhandledExceptionFilter
GetModuleHandleW
GetACP
TerminateProcess
RaiseException
GetLocaleInfoW
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTickCount
EnumResourceNamesA
Sleep
MultiByteToWideChar
lstrlenA
InterlockedCompareExchange
TzSpecificLocalTimeToSystemTime
WideCharToMultiByte
LocalAlloc
CreateProcessW
GetCurrentThreadId
GetEnvironmentVariableW
GetStartupInfoW
lstrlenW
GetThreadLocale
winmm
mciSendCommandA
sndPlaySoundA
oleacc
LresultFromObject
CreateStdAccessibleObject
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
shlwapi
PathAddBackslashA
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ