Static task
static1
Behavioral task
behavioral1
Sample
fab119f33b90153777a525897a4568172605f9ac2071fa53aed206b2396d77bf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fab119f33b90153777a525897a4568172605f9ac2071fa53aed206b2396d77bf.exe
Resource
win10v2004-20220812-en
General
-
Target
fab119f33b90153777a525897a4568172605f9ac2071fa53aed206b2396d77bf
-
Size
1.2MB
-
MD5
51fb20e73e5901eda88b8655f9bed410
-
SHA1
29d0649692b155f67283d61ea8e993b883784d34
-
SHA256
fab119f33b90153777a525897a4568172605f9ac2071fa53aed206b2396d77bf
-
SHA512
b532d818a437c1a823fbda2205eafc012bcbc83d25bb3bb534d0dcd4cbbe5086342f891e5ad20ae3a0ceb2b46b14101dd926c5b8c657485f30d16ed9d255b926
-
SSDEEP
24576:BUzfAXTqbUqoMYpXOwguIr85xrB8vryIJw:BGr+
Malware Config
Signatures
Files
-
fab119f33b90153777a525897a4568172605f9ac2071fa53aed206b2396d77bf.exe windows x86
c932fb1a38b397e33cc92a89b4017b43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
GetSystemWindowsDirectoryW
VerSetConditionMask
OpenProcess
CreateEventA
GetCompressedFileSizeW
VirtualQuery
OpenJobObjectW
GetThreadContext
CreateMutexA
IsDBCSLeadByte
FileTimeToLocalFileTime
FindNextFileW
TlsAlloc
GetPriorityClass
GetStdHandle
SetStdHandle
SetTapeParameters
GetTempFileNameW
GetShortPathNameA
TryEnterCriticalSection
SetPriorityClass
SetFilePointerEx
lstrcpynW
ReadProcessMemory
GetWindowsDirectoryW
lstrcpynA
GetLogicalDrives
GetDriveTypeW
MoveFileWithProgressA
IsProcessorFeaturePresent
SetHandleCount
RemoveDirectoryW
GetTapeStatus
SetFileTime
OpenFileMappingA
GetConsoleAliasesW
CreateNamedPipeW
IsBadWritePtr
GetFileSize
FreeEnvironmentStringsW
MoveFileA
Toolhelp32ReadProcessMemory
lstrcmpA
GetComputerNameW
ReadFile
HeapSetInformation
UnregisterWaitEx
GetPrivateProfileStructW
LocalReAlloc
MapUserPhysicalPages
IsDBCSLeadByteEx
Module32NextW
OpenEventW
GetLocaleInfoW
ResetEvent
GetEnvironmentVariableA
GetUserDefaultLCID
GetStartupInfoA
GetEnvironmentStrings
GetConsoleOutputCP
ConvertThreadToFiber
WaitForMultipleObjectsEx
GetProcessPriorityBoost
GetCPInfo
GetLongPathNameW
SystemTimeToFileTime
PrepareTape
LoadResource
CreateDirectoryExA
GetFileAttributesExA
WritePrivateProfileStringA
ReplaceFileA
GetACP
OutputDebugStringW
OpenMutexA
GetConsoleMode
FreeLibraryAndExitThread
SetComputerNameExA
GetTimeFormatW
ReleaseSemaphore
GetSystemDefaultLCID
GetVolumeInformationW
WideCharToMultiByte
IsSystemResumeAutomatic
CreateProcessW
LCMapStringW
GetCommandLineW
FreeResource
GetFileSizeEx
GetWindowsDirectoryA
GetThreadLocale
GetFullPathNameW
SetThreadExecutionState
SetEnvironmentVariableA
GetModuleFileNameA
IsValidCodePage
GetPrivateProfileSectionNamesW
GetLogicalDriveStringsW
MoveFileWithProgressW
SetCalendarInfoW
FlushViewOfFile
BindIoCompletionCallback
GetPrivateProfileSectionW
VerifyVersionInfoW
VirtualAlloc
SetCurrentDirectoryW
user32
CreateWindowExA
SetWindowPos
SetMenuItemInfoW
GetDC
ScreenToClient
AllowSetForegroundWindow
IsClipboardFormatAvailable
GetSystemMenu
DialogBoxIndirectParamW
GetWindow
ClientToScreen
MessageBeep
GetClassInfoW
IsCharAlphaW
SetMenuDefaultItem
MonitorFromRect
MsgWaitForMultipleObjects
EnumWindows
MapVirtualKeyW
GetMessageA
GetAltTabInfoA
Sections
.text Size: 952KB - Virtual size: 951KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lrv Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2sn3 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ