Static task
static1
Behavioral task
behavioral1
Sample
fa54269dbb9c516a197c05c2a8be833410717b4ae47cdcbf6ab48b221aa27862.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa54269dbb9c516a197c05c2a8be833410717b4ae47cdcbf6ab48b221aa27862.exe
Resource
win10v2004-20221111-en
General
-
Target
fa54269dbb9c516a197c05c2a8be833410717b4ae47cdcbf6ab48b221aa27862
-
Size
59KB
-
MD5
ac21649313510a8c7c30222309495e15
-
SHA1
33d6388301d439e59e8543926926b883b4ecbf04
-
SHA256
fa54269dbb9c516a197c05c2a8be833410717b4ae47cdcbf6ab48b221aa27862
-
SHA512
94e33217b786be3df7a128b43b7a5490e19fde215d4f3ff5b93f34eb037eea3fa353e5cb11c1d8d319248af7ea180dedae8ebbaca37708d6cff5d9824804eac1
-
SSDEEP
1536:0A38701qzE4ousTQJcmSZcfOECrVBvg9vi+x:0H014o5mcNufOECbUpx
Malware Config
Signatures
Files
-
fa54269dbb9c516a197c05c2a8be833410717b4ae47cdcbf6ab48b221aa27862.exe windows x86
409a95fc3aa2964e610505e996b74ec9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
GetStartupInfoW
SetFileTime
GetStringTypeA
CreateEventW
lstrcpyW
lstrcatA
LoadLibraryA
InterlockedExchange
HeapSize
CloseHandle
SetConsoleTitleW
HeapCreate
GetFileSize
IsBadWritePtr
GetExitCodeProcess
GetModuleHandleA
LeaveCriticalSection
ReadFileEx
GetLastError
SetFileTime
mstscax
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
shell32
DragAcceptFiles
SHGetMalloc
DragQueryFileA
DuplicateIcon
ShellAboutA
StrChrA
SHGetDiskFreeSpaceA
DragFinish
SHGetSettings
ExtractIconA
DllUnregisterServer
ShellMessageBoxW
SHFree
rasapi32
DwRasUninitialize
Sections
.text Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ