Static task
static1
Behavioral task
behavioral1
Sample
fc2d393dbb080f57b5af6ea2973d49faf26b2b044add9bba5b105df5093c887a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc2d393dbb080f57b5af6ea2973d49faf26b2b044add9bba5b105df5093c887a.exe
Resource
win10v2004-20220812-en
General
-
Target
fc2d393dbb080f57b5af6ea2973d49faf26b2b044add9bba5b105df5093c887a
-
Size
278KB
-
MD5
5986198d6c00fcb2318e7d7ba0a69459
-
SHA1
51731e3ae773a2476a4b93d00eda2e9b69377dcb
-
SHA256
fc2d393dbb080f57b5af6ea2973d49faf26b2b044add9bba5b105df5093c887a
-
SHA512
b4e1f1f8cc4ebd62a240208b5f78151594da06eb84626ad0b45987ae6e5e5c132fbe8b39faf9ac0415e099707920e9bf90309a566e6a9ce43ab6d1c852373726
-
SSDEEP
6144:nv6jsXLkz4ZpCEEsEXulYlONCpUjb+OaGy6aG71Moe:nhXLkz4ZWES6GUjFaq9e
Malware Config
Signatures
Files
-
fc2d393dbb080f57b5af6ea2973d49faf26b2b044add9bba5b105df5093c887a.exe windows x86
53dac8ad4b8304764bb821221965ac15
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
HeapFree
GetUserDefaultLCID
lstrcpyW
LoadLibraryW
GetSystemTimeAsFileTime
CreateFileA
GetProcessHeap
GlobalAlloc
lstrcmpA
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
lstrlenW
GetTickCount
SetUnhandledExceptionFilter
GlobalFindAtomA
SetLastError
SystemTimeToFileTime
HeapAlloc
GetLocalTime
FindResourceW
psapi
EnumProcessModules
GetProcessImageFileNameA
GetPerformanceInfo
EnumPageFilesA
EnumPageFilesW
EmptyWorkingSet
olecli32
LeSetBounds
LeObjectConvert
LeSetData
LeSaveToStream
LeGetUpdateOptions
LeRelease
LeQueryBounds
LeReconnect
LeQueryOpen
LeQueryOutOfDate
LeObjectLong
Sections
.text Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ