Static task
static1
Behavioral task
behavioral1
Sample
fcfe4e7727544413168664c1d2e38d3f04805339abee28e8a05b6a6815e6ceab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcfe4e7727544413168664c1d2e38d3f04805339abee28e8a05b6a6815e6ceab.exe
Resource
win10v2004-20221111-en
General
-
Target
fcfe4e7727544413168664c1d2e38d3f04805339abee28e8a05b6a6815e6ceab
-
Size
81KB
-
MD5
00b29836373687fe0efe8c66dd9e79b0
-
SHA1
c5d7c23a58fee3ec7dbf5c60cd94a305572a56ae
-
SHA256
fcfe4e7727544413168664c1d2e38d3f04805339abee28e8a05b6a6815e6ceab
-
SHA512
c8f0dddecbc4dd041be0e836923b65b7cca95c611706f0a7ba5c2de7bc58cdf860529ed6395ea2f9b03607298df2d053dd763d6a9948a3f01f0c97d85ea46cef
-
SSDEEP
1536:8VEmbt/IEJLdJjPAB9knDM2Y5QqFgmZ9dzw2tGTYKOZwqlA2ffUsZ+g:JmbNIsJJj+9nzhFHX9E8B/TffBr
Malware Config
Signatures
Files
-
fcfe4e7727544413168664c1d2e38d3f04805339abee28e8a05b6a6815e6ceab.exe windows x86
e85cfd58a9d911e7055cea8b68ed0244
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetProcAddress
RtlZeroMemory
CreateThread
lstrcpyA
WaitForSingleObject
HeapAlloc
LoadLibraryA
ExitProcess
ntdll
_wcsnicmp
user32
OpenClipboard
TranslateMessage
GetMessageA
DispatchMessageW
ole32
CoInitialize
comctl32
ord17
powrprof
GetActivePwrScheme
GetPwrCapabilities
clusapi
ClusterEnum
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE