Static task
static1
Behavioral task
behavioral1
Sample
fc1a4d5b97b7ca2d7027283db50df75a32a714e1929c953a8aad5d8d33a61894.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fc1a4d5b97b7ca2d7027283db50df75a32a714e1929c953a8aad5d8d33a61894.exe
Resource
win10v2004-20221111-en
General
-
Target
fc1a4d5b97b7ca2d7027283db50df75a32a714e1929c953a8aad5d8d33a61894
-
Size
48KB
-
MD5
43f1402cd7acec2d43a6dce2faa7eada
-
SHA1
656f61db8e259e8d2965ef03feece04611672eea
-
SHA256
fc1a4d5b97b7ca2d7027283db50df75a32a714e1929c953a8aad5d8d33a61894
-
SHA512
4323c67eddbd961b2d512aa68b103485ca80bf9ae2b0c301bc3c25db23928f7b73c02b95260b0e5afed5dffa6b35304a4482590e0006cb7c769e0147be75fb9b
-
SSDEEP
384:7hTfNd04iR77gh+kj95RkC2ozqQ4Bq8v8W7Wco1gQirqSGCmuismq/5Z:dTVd0DRAl9bwoTKWEPiYmq/5
Malware Config
Signatures
Files
-
fc1a4d5b97b7ca2d7027283db50df75a32a714e1929c953a8aad5d8d33a61894.exe windows x86
be3afe657eef4d893c78081d04db56f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GetCommandLineW
HeapDestroy
SetEvent
GetModuleHandleA
HeapCreate
GetEnvironmentVariableA
GetStartupInfoA
TlsAlloc
CancelIo
lstrlenA
GetStdHandle
CreateFileA
GetACP
ReleaseMutex
GetModuleFileNameA
ResetEvent
IsBadCodePtr
SetLastError
CreateFileMappingA
advapi32
IsValidSid
CreateServiceW
RegCreateKeyExW
RegQueryValueW
InitializeSid
IsValidAcl
RegEnumKeyA
ClearEventLogW
ControlService
RegDeleteValueA
IsValidSecurityDescriptor
CreateProcessAsUserA
IsTextUnicode
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE