Static task
static1
Behavioral task
behavioral1
Sample
fc220ecd771fe9d0680d12932593c776104ff930775cd58cce0f445631e40125.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc220ecd771fe9d0680d12932593c776104ff930775cd58cce0f445631e40125.exe
Resource
win10v2004-20220901-en
General
-
Target
fc220ecd771fe9d0680d12932593c776104ff930775cd58cce0f445631e40125
-
Size
576KB
-
MD5
032dfbcabc057d37a08060f5a018f4f0
-
SHA1
f105e29fb771c62ec05afef01dbe206a638cde61
-
SHA256
fc220ecd771fe9d0680d12932593c776104ff930775cd58cce0f445631e40125
-
SHA512
39133d02181cd38b4e11ff7c90f58f56bd4de846b701afc20ff075068788d857168b074aa43434f417ebec7fa904fff23fc4b15e2332f60ea3082485711920e7
-
SSDEEP
12288:B/cnY0RjC8TeJeRMaMU6rw9Zb6g1Nljwy:SnY0RO8CJeR9Ww9N6g1N
Malware Config
Signatures
Files
-
fc220ecd771fe9d0680d12932593c776104ff930775cd58cce0f445631e40125.exe windows x86
bb9e9379853b0aaa09042026d55f8832
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cfgmgr32
CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA
CMP_UnregisterNotification
CMP_Init_Detection
kernel32
CreateMutexA
TlsGetValue
FindResourceA
InterlockedExchange
GetLogicalDrives
GetModuleHandleA
FileTimeToSystemTime
CompareStringW
GetEnvironmentVariableW
FindFirstFileA
GetStdHandle
GetShortPathNameA
VirtualQuery
GetProcAddress
GetVersionExA
DeleteFileA
SetVolumeLabelA
GetLastError
CreateSemaphoreA
GetCurrentProcess
GetComputerNameW
user32
PeekMessageA
DispatchMessageA
LoadImageA
IsCharLowerW
GetMessageW
SetFocus
GetWindowLongA
wsprintfA
PostMessageA
DrawIcon
IsDialogMessageA
IsWindow
crypt32
CertAddStoreToCollection
CertFindAttribute
CertCreateCRLContext
CertCloseStore
CertFindCRLInStore
CertDuplicateCRLContext
CertCreateContext
CryptFindOIDInfo
CertSaveStore
CertAlgIdToOID
CertCompareCertificate
CertFreeCRLContext
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 543KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ