Static task
static1
Behavioral task
behavioral1
Sample
fa6c24eae16381dda488ab66eb8f111686743aaa5132042b4fd611bfa1029df8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa6c24eae16381dda488ab66eb8f111686743aaa5132042b4fd611bfa1029df8.exe
Resource
win10v2004-20220812-en
Errors
General
-
Target
fa6c24eae16381dda488ab66eb8f111686743aaa5132042b4fd611bfa1029df8
-
Size
1.4MB
-
MD5
5c2b176e95c6758a436d00af39477783
-
SHA1
2a650382bc3f5be1bee256d51d2d471f1ca4342e
-
SHA256
fa6c24eae16381dda488ab66eb8f111686743aaa5132042b4fd611bfa1029df8
-
SHA512
a1a52e692a4bd78205c96928b8d74494476e05adcbe6f5b750d5459fb337f191206b6e888eb81006581e40d82b46c8fc9d25470ecf5c48119202711e522edcf4
-
SSDEEP
192:vxHwGt22dNQOu0Veok/y9zHJOlQtAJmP1oyn/c/w:vxUyalQtAJQ1Rc4
Malware Config
Signatures
Files
-
fa6c24eae16381dda488ab66eb8f111686743aaa5132042b4fd611bfa1029df8.exe windows x86
4853c5ed9338eb4cc488f0959f7204e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
CloseHandle
CreateProcessA
DeleteFileA
GetModuleFileNameA
GetSystemTime
GetWindowsDirectoryA
CreateThread
ExitProcess
CopyFileA
Sleep
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
msvcrt
fwrite
fopen
sprintf
fclose
srand
time
fread
fseek
fscanf
fputs
fgets
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
rand
wininet
InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
winmm
timeGetTime
netapi32
Netbios
psapi
EnumProcesses
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE