Static task
static1
Behavioral task
behavioral1
Sample
fd422dd0e68311b7e19cd3a293e965179b158a1c305dbcc2c45fb3a52d93faed.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fd422dd0e68311b7e19cd3a293e965179b158a1c305dbcc2c45fb3a52d93faed.exe
Resource
win10v2004-20220901-en
General
-
Target
fd422dd0e68311b7e19cd3a293e965179b158a1c305dbcc2c45fb3a52d93faed
-
Size
102KB
-
MD5
8374956b75e95e4ae9e719de54e538d3
-
SHA1
752828f1b064aee2919bfa39d9f22c8a44be64f2
-
SHA256
fd422dd0e68311b7e19cd3a293e965179b158a1c305dbcc2c45fb3a52d93faed
-
SHA512
927208d452be7211aadb1bb562bd35d72f39abcd78fa4ca231301fbdc445b3d5663395e6e1bbc7f55e9de451e21559639ec933775b4dcd05f964a285e1498bf7
-
SSDEEP
3072:3indRzNyaLLU8m0btBI+C32ovc+CPNnSoer:yndRNhLMqq/7vqSoer
Malware Config
Signatures
Files
-
fd422dd0e68311b7e19cd3a293e965179b158a1c305dbcc2c45fb3a52d93faed.exe windows x86
21755db7a6e07b0663ccfe25e75fc7c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadContext
GetTapeParameters
GlobalFindAtomA
GetThreadTimes
WriteTapemark
GetVolumeInformationA
GetProcAddress
VirtualQueryEx
ContinueDebugEvent
SizeofResource
IsBadReadPtr
LoadLibraryA
lstrcatA
SetHandleCount
CreateProcessW
SetTapeParameters
VirtualAlloc
GetProfileIntW
CreateFileMappingW
IsDebuggerPresent
HeapDestroy
GetThreadPriority
DecodePointer
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
mswsock
MigrateWinsockConfiguration
dn_expand
GetAddressByNameA
GetServiceW
oledlg
ord3
ord8
OleUIUpdateLinksW
OleUIPromptUserW
OleUIObjectPropertiesW
shlwapi
SHEnumKeyExA
StrRChrIA
StrNCatA
StrCmpNW
PathUnExpandEnvStringsA
PathSkipRootA
UrlGetPartA
UrlIsNoHistoryW
StrCmpLogicalW
StrPBrkW
StrCatBuffA
PathCommonPrefixA
StrRetToBSTR
SHGetInverseCMAP
StrChrIW
PathCreateFromUrlW
StrSpnA
SHSetThreadRef
SHSetValueW
SHRegQueryInfoUSKeyW
UrlCompareW
PathIsFileSpecA
msvcrt
__p__fmode
_XcptFilter
exit
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__commode
__getmainargs
_adjust_fdiv
__setusermatherr
_initterm
_exit
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ