Static task
static1
Behavioral task
behavioral1
Sample
fe0b948f1079c94f17bab3771cf8830eb103608714f58db97595baac9ecf4c58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe0b948f1079c94f17bab3771cf8830eb103608714f58db97595baac9ecf4c58.exe
Resource
win10v2004-20220812-en
General
-
Target
fe0b948f1079c94f17bab3771cf8830eb103608714f58db97595baac9ecf4c58
-
Size
304KB
-
MD5
f204a444d7ab4c647cfd20994b849dcc
-
SHA1
85b0c63f381ca1cbe43987cf1570aa9796eaaf23
-
SHA256
fe0b948f1079c94f17bab3771cf8830eb103608714f58db97595baac9ecf4c58
-
SHA512
65127b13e16c17867b96cf0a5569c9ea0c33baf57dcee37856ae5e7e448c4fff634c4e9df443eb71b562088fd804677e50c532cef657ef0bf51f63769a036f23
-
SSDEEP
6144:sHxi3fvmw7q6CG+SESQqsT2gQCKVw+sedQ4:sRiP+w7q6CTKg3KVwNSP
Malware Config
Signatures
Files
-
fe0b948f1079c94f17bab3771cf8830eb103608714f58db97595baac9ecf4c58.exe windows x86
e0f59a2c5a75347ef6a2e00987780914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetCommandLineA
InitializeCriticalSection
LoadLibraryW
Sleep
FreeConsole
LeaveCriticalSection
ReadFile
GetModuleFileNameW
CreateFileW
GetStdHandle
GetLastError
SetLastError
GetProcAddress
EnterCriticalSection
LoadLibraryA
GetModuleFileNameA
DeleteCriticalSection
CloseHandle
GetCurrentProcessId
GetVolumeInformationW
ExitProcess
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
VirtualProtect
HeapAlloc
HeapFree
GetProcessHeap
GetTempPathA
GetCurrentProcess
ReadConsoleW
GetModuleHandleW
InterlockedCompareExchange
WaitForSingleObject
GetModuleHandleExW
FreeLibrary
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetCPInfo
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
LCMapStringW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCurrentThreadId
AreFileApisANSI
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
GetFileType
SetFilePointerEx
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
VirtualQuery
user32
MessageBoxW
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ