Static task
static1
Behavioral task
behavioral1
Sample
fc8afcad92ebc22185d137da43f949beca029f7e2306cfdcd11817d21dd90dcb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc8afcad92ebc22185d137da43f949beca029f7e2306cfdcd11817d21dd90dcb.exe
Resource
win10v2004-20221111-en
General
-
Target
fc8afcad92ebc22185d137da43f949beca029f7e2306cfdcd11817d21dd90dcb
-
Size
811KB
-
MD5
a06162d37cdfc2d4cc1bbd4f59834c1a
-
SHA1
533da4aaef0bcb140c61ba3d963451adbb471bd0
-
SHA256
fc8afcad92ebc22185d137da43f949beca029f7e2306cfdcd11817d21dd90dcb
-
SHA512
fe3856db75379b856faedca4ea08733bb6e669ca147fad515fb9f12e114df6effd3f336ec2767a3704c19f2a04191441626526b7500f96533af61925f7416e10
-
SSDEEP
12288:lAUmLwCXmaczY/QyATvFqH4ve1UBpP4hcZsx0nk0vRioohxPua1:+UmLpEzmATvFJTBF4u60nk0JioohYa1
Malware Config
Signatures
Files
-
fc8afcad92ebc22185d137da43f949beca029f7e2306cfdcd11817d21dd90dcb.exe windows x86
e9888150965812ca313331942d23a9b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
GetFileSize
GetConsoleMode
InitializeCriticalSection
VirtualProtectEx
RemoveDirectoryA
lstrlenW
GetCommandLineW
EnterCriticalSection
FindClose
Sleep
TlsGetValue
GetLocalTime
DeleteFileA
GetModuleFileNameA
CreateFileA
GlobalFree
WriteConsoleW
GetStartupInfoA
CloseHandle
GetModuleHandleA
GetCalendarInfoW
GetTickCount
LeaveCriticalSection
GetDriveTypeA
user32
IsWindowEnabled
GetWindowDC
GetSysColor
wsprintfA
GetWindowLongA
FillRect
MessageBoxA
GetWindowLongA
IsWindowVisible
DispatchMessageA
PeekMessageA
IsWindow
EqualRect
cryptdlg
CertTrustCertPolicy
CertConfigureTrustW
CertConfigureTrustA
CertTrustCleanup
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE