Static task
static1
Behavioral task
behavioral1
Sample
fedf0d73b13845f05e8ce07c45f5c7ddd5c0cb5f1f7f53d44a326b5f07bc4a32.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fedf0d73b13845f05e8ce07c45f5c7ddd5c0cb5f1f7f53d44a326b5f07bc4a32.exe
Resource
win10v2004-20220812-en
General
-
Target
fedf0d73b13845f05e8ce07c45f5c7ddd5c0cb5f1f7f53d44a326b5f07bc4a32
-
Size
116KB
-
MD5
52ac116acbc71935002796cf214c6688
-
SHA1
f3fbae5e6ddd7564e13aff6f2a9ffde47db6ca07
-
SHA256
fedf0d73b13845f05e8ce07c45f5c7ddd5c0cb5f1f7f53d44a326b5f07bc4a32
-
SHA512
c716902511af22dd5f52e67d8a6d1eb86fd202ff1a73340e100b4ba197d7be7b2b8f8414ceb45114582edc6f6dee3e0afbbb2b1954abcd7da377e84a457f7d9c
-
SSDEEP
1536:Xh/uhF3r0+IryMXnpSMvUGIsHuLMccV9mPBc7FulxyykNj1/iaURL4xStOavw3ht:xUF7jImMDIlQ9mPBc7klx6pPKqStOcwv
Malware Config
Signatures
Files
-
fedf0d73b13845f05e8ce07c45f5c7ddd5c0cb5f1f7f53d44a326b5f07bc4a32.exe windows x86
1537fab4362ee2b3a9fc842d3b743d7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
HeapAlloc
HeapReAlloc
GetLastError
SetLastError
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetVersionExA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
InterlockedIncrement
GetModuleFileNameA
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
ExitProcess
VirtualAlloc
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
InitializeCriticalSection
VirtualQuery
InterlockedExchange
GetCPInfo
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetACP
GetOEMCP
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ