Static task
static1
Behavioral task
behavioral1
Sample
fe5e712bd234aa44ef069ff50df2d926db61ae2b5858ef00ad5dad424e8fc0f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe5e712bd234aa44ef069ff50df2d926db61ae2b5858ef00ad5dad424e8fc0f3.exe
Resource
win10v2004-20220812-en
General
-
Target
fe5e712bd234aa44ef069ff50df2d926db61ae2b5858ef00ad5dad424e8fc0f3
-
Size
79KB
-
MD5
b2b6b7cd1b77d77a76943faf646cfe36
-
SHA1
569afdc81206dd0c876b97b80414f062d15781aa
-
SHA256
fe5e712bd234aa44ef069ff50df2d926db61ae2b5858ef00ad5dad424e8fc0f3
-
SHA512
c12844ee9645701dbb7cddf10c411252f0facb84475b11cd124ef5dc2cb4385c9bd6cd7c85a36bee83f19833ebab3ca96b3ca9c23ffe1a3832999ac3f1faa473
-
SSDEEP
1536:PimMigotp98NarPpaTx7jEX8HMxhbTVqFmx7oRmdGgp13ZAeOtR2L/7v0Z:PzTg3N8PYtgMHuhbTVqFE76pgpPAeOtR
Malware Config
Signatures
Files
-
fe5e712bd234aa44ef069ff50df2d926db61ae2b5858ef00ad5dad424e8fc0f3.exe windows x86
4c301588fd0f6245a5b730710e4ebb95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
OpenEventA
GetCurrentProcess
ExitProcess
GetVersionExA
GetProcAddress
GetLastError
WriteFile
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
LocalFree
LocalAlloc
ReadFile
GetModuleHandleA
LoadLibraryA
InterlockedExchange
FreeLibrary
RaiseException
advapi32
GetTokenInformation
OpenSCManagerA
OpenProcessToken
user32
TranslateMessage
GetDC
GetWindowLongA
GetWindowRect
GetWindowTextW
SetCursor
LoadCursorA
ChildWindowFromPoint
ScreenToClient
GetCursorPos
GetClientRect
SendMessageA
SetWindowLongA
PostQuitMessage
EndPaint
BeginPaint
DestroyWindow
RegisterClassExA
UpdateWindow
ShowWindow
IsWindow
DefWindowProcA
GetMessageA
DispatchMessageA
CreateWindowExA
GetSystemMetrics
ReleaseDC
shell32
ShellExecuteA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fjphnau Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE