Static task
static1
Behavioral task
behavioral1
Sample
fc25c64cef64765c936fb0945a11c8de652fef5284fcec3dd35c0a4546c0203c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc25c64cef64765c936fb0945a11c8de652fef5284fcec3dd35c0a4546c0203c.exe
Resource
win10v2004-20220812-en
General
-
Target
fc25c64cef64765c936fb0945a11c8de652fef5284fcec3dd35c0a4546c0203c
-
Size
768KB
-
MD5
1c8c3ec72f92295fc6bfaa14e7887616
-
SHA1
095547767de21f9557c4a8b0ffacbb722a7d8187
-
SHA256
fc25c64cef64765c936fb0945a11c8de652fef5284fcec3dd35c0a4546c0203c
-
SHA512
de355128defe8ed08f768332b793d18c8099058b9e4fc962fa72f972a65f298c658003e7a94e790a6d46664fdcfb990785e3a062d20d4aeec2db6e465ad35973
-
SSDEEP
12288:sUaaxdUusjvyceFXgzLpD/OBhY3YXYwup2kbMXBw9VEN4EtDg4r65S7xq2:ftxdOeuzLBWIItuYhXBEVqLtU4roMF
Malware Config
Signatures
Files
-
fc25c64cef64765c936fb0945a11c8de652fef5284fcec3dd35c0a4546c0203c.exe windows x86
c8287f4d2f152c52bb3639fd0366395c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
VirtualProtect
Sleep
SetLastError
GetProcessHeap
GlobalFree
LoadLibraryA
DeleteFileW
SetEvent
CreateMutexW
GetLocalTime
GetStdHandle
CreateHardLinkW
CreateDirectoryW
GetPriorityClass
ReadConsoleW
CreateSemaphoreA
GetTickCount
HeapSize
GetFileAttributesA
SetLastError
wintrust
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
traffic
TcAddFilter
TcDeleteFilter
TcAddFlow
TcDeleteFlow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE