Static task
static1
Behavioral task
behavioral1
Sample
fefe741af85d37c66309fc07d62d0d181af08e42d6ddc784b82071c17175b91c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fefe741af85d37c66309fc07d62d0d181af08e42d6ddc784b82071c17175b91c.exe
Resource
win10v2004-20220901-en
General
-
Target
fefe741af85d37c66309fc07d62d0d181af08e42d6ddc784b82071c17175b91c
-
Size
117KB
-
MD5
96880160e410ee46bcd2a1beee644c27
-
SHA1
97d5370f4db22fc7f83e7b775101c8a78b5bb9a9
-
SHA256
fefe741af85d37c66309fc07d62d0d181af08e42d6ddc784b82071c17175b91c
-
SHA512
e4b9e2491c09bc3af52134c339190e64e858281ac3c378e1b9b44ed6d0f370f24ed93908f13de1174aee8b0d8326a8d01f217da06f1742df1fcadfda80128ece
-
SSDEEP
1536:kaxLogVubrFoL63ct1lrY8qgR2vGy50zXpdyj4tuPavgXE6eOG7bEKBFdh9H82h:kpgMg6ydq8yApEIQEYeOmbEsFB82h
Malware Config
Signatures
Files
-
fefe741af85d37c66309fc07d62d0d181af08e42d6ddc784b82071c17175b91c.exe windows x86
759ebbacc7959134ee0d2de7847ae373
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
GetTickCount
CreateEventA
CreateMutexA
GetCommandLineW
GetModuleHandleA
GetCommandLineA
GetCurrentThread
GetPriorityClass
GetEnvironmentStrings
GetStdHandle
IsDebuggerPresent
VirtualAlloc
GetCurrentProcessId
CreateSemaphoreA
GetProcAddress
GetVersionExA
GetStartupInfoA
user32
ReleaseDC
SetWindowTextA
GetWindowDC
LoadCursorFromFileA
LoadIconA
LoadCursorA
gdi32
GetTextColor
AbortDoc
GetTextMetricsA
SetTextAlign
GetRasterizerCaps
crypt32
CertStrToNameA
msvcrt
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
memcpy
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ