Static task
static1
Behavioral task
behavioral1
Sample
fa39c8aa68bbd30b8291b1c11935147fdbd747cc8ad65bc955c4147e17ce5d08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa39c8aa68bbd30b8291b1c11935147fdbd747cc8ad65bc955c4147e17ce5d08.exe
Resource
win10v2004-20220812-en
General
-
Target
fa39c8aa68bbd30b8291b1c11935147fdbd747cc8ad65bc955c4147e17ce5d08
-
Size
89KB
-
MD5
c27bd2a9e6aaf55f2280e05daf71ae79
-
SHA1
8421cd682fad9eaab2420ed5d976407a226aacd7
-
SHA256
fa39c8aa68bbd30b8291b1c11935147fdbd747cc8ad65bc955c4147e17ce5d08
-
SHA512
f0f4eaff08cd597d3573ae00f20635b24aab4742264428e8b30628c9e4fdf7ce60140fe4e6d03d6c035cfc28cd866cb18452cf6e00f7e6a3fe555de76599bbe9
-
SSDEEP
1536:MYuMV1ViAj1ibicBR8lzg2LUt34K9s+KsiQM9ZEv+cY6BF80:8MV1ibRBR8lEwUtHsjdR63f
Malware Config
Signatures
Files
-
fa39c8aa68bbd30b8291b1c11935147fdbd747cc8ad65bc955c4147e17ce5d08.exe windows x86
9decfd22ead41e53f7908e069f4d9284
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
LockResource
LoadResource
GlobalAlloc
SizeofResource
FindResourceA
ReadFile
SetFilePointer
FlushFileBuffers
Sleep
WinExec
GetModuleFileNameA
GetModuleHandleA
lstrlenA
lstrcatA
MoveFileA
GlobalFree
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetLastError
CreateFileA
GetFileTime
SetFileTime
CloseHandle
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
RtlUnwind
GetCommandLineA
GetVersionExA
InterlockedExchange
VirtualQuery
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
advapi32
ChangeServiceConfig2A
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
ControlService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
CreateServiceA
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ