Static task
static1
Behavioral task
behavioral1
Sample
fe88476cec55289e98c9881a691066cbd13f9e1c76e6f6b6445584b86127abfd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe88476cec55289e98c9881a691066cbd13f9e1c76e6f6b6445584b86127abfd.exe
Resource
win10v2004-20220812-en
General
-
Target
fe88476cec55289e98c9881a691066cbd13f9e1c76e6f6b6445584b86127abfd
-
Size
277KB
-
MD5
4bfde8983a0fe1cf2f7b8b04dc6fdc5a
-
SHA1
f9f493a07e76206fb0bc0c4de4ae22bc227009e4
-
SHA256
fe88476cec55289e98c9881a691066cbd13f9e1c76e6f6b6445584b86127abfd
-
SHA512
1f8bd3a234d05a3358ca6c72c009de9b18baac3acdbbd56f0cf6628b15bb686d82d44a6aac0475779b339c26ba1b78a5001c5f94822b777cffa9ad0d5af69e02
-
SSDEEP
6144:2PCp3Y3bqwEX2ShShxhz0XZogzxn9pN96mIqmtgzhBIMmv0y:8IKXEmNdz0pNZvNpMtMhBID
Malware Config
Signatures
Files
-
fe88476cec55289e98c9881a691066cbd13f9e1c76e6f6b6445584b86127abfd.exe windows x86
bd9054c8a8ea38eaebc14e8632d37fb8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
CreateFileA
SetUnhandledExceptionFilter
FindResourceW
CloseHandle
GetTickCount
GetProcessHeap
lstrcpyW
QueryPerformanceCounter
lstrlenW
GetLocalTime
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
WideCharToMultiByte
LoadLibraryW
SetLastError
GetUserDefaultLCID
lstrcmpA
MultiByteToWideChar
GetCurrentProcessId
GlobalFindAtomA
SystemTimeToFileTime
olecli32
LeSaveToStream
LeQueryBounds
LeSetData
LeGetUpdateOptions
LeRelease
LeReconnect
LeQueryOpen
LeObjectLong
LeQueryOutOfDate
LeObjectConvert
LeSetBounds
psapi
EnumPageFilesW
EnumProcessModules
GetPerformanceInfo
GetProcessImageFileNameA
EnumPageFilesA
EmptyWorkingSet
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ