Static task
static1
Behavioral task
behavioral1
Sample
fa376e441f3d2be3e549c8aa15849208318c703ceeb66175bd648f720308666a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa376e441f3d2be3e549c8aa15849208318c703ceeb66175bd648f720308666a.exe
Resource
win10v2004-20220901-en
General
-
Target
fa376e441f3d2be3e549c8aa15849208318c703ceeb66175bd648f720308666a
-
Size
769KB
-
MD5
a3854074fe6e2e940179a91d85b3a11c
-
SHA1
38e2a8e74578507142f1d51b9c6bbb736718cf93
-
SHA256
fa376e441f3d2be3e549c8aa15849208318c703ceeb66175bd648f720308666a
-
SHA512
17a3d9bab0eea60b3959e0b9eb563d4071a48c1c34cbbe6ef588826f3a837f20b2f9bbcb16aafa77cf900b3d9c0784ea62510b076a39cd013716b498306c7231
-
SSDEEP
12288:Pu7SKSwxn2rkoHtG5H4GCBfdnINtR8ff00Fe2ZGcXEXwjFGRq5mkZGJz/cCk:iS8x2tGYbBfVINUftF43wjFuqR4v
Malware Config
Signatures
Files
-
fa376e441f3d2be3e549c8aa15849208318c703ceeb66175bd648f720308666a.exe windows x86
2dfad1897c217f5dd9c1b064c18b1ca2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GetDriveTypeA
VirtualProtectEx
WriteConsoleW
RemoveDirectoryA
lstrlenA
CreateDirectoryW
Beep
WriteFile
SetStdHandle
FindClose
CreateMutexA
GetTickCount
GetFileType
DeleteFileA
FindClose
OpenEventW
ReleaseSemaphore
CreateFileA
GetModuleHandleA
HeapFree
GetCommandLineA
ReleaseMutex
CreateFileMappingW
RemoveDirectoryA
user32
GetWindowLongA
GetSysColor
DispatchMessageA
IsZoomed
DestroyMenu
FindWindowA
MessageBoxA
DrawTextW
GetClassInfoA
CreateIcon
PeekMessageA
DestroyMenu
IsWindow
dmutil
DisplayError
DisplayError
DisplayError
DisplayError
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ