Static task
static1
Behavioral task
behavioral1
Sample
fc17dcf7bbd0aef89a80ae006e7e90aa980c806304c8663842f4a1aafe2f90a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc17dcf7bbd0aef89a80ae006e7e90aa980c806304c8663842f4a1aafe2f90a8.exe
Resource
win10v2004-20221111-en
General
-
Target
fc17dcf7bbd0aef89a80ae006e7e90aa980c806304c8663842f4a1aafe2f90a8
-
Size
253KB
-
MD5
66dc78c120ce276f1cc3c41d476e895b
-
SHA1
2afeba02e53fc90ec7725f4185cc96733a73c123
-
SHA256
fc17dcf7bbd0aef89a80ae006e7e90aa980c806304c8663842f4a1aafe2f90a8
-
SHA512
4af962e5feedf7897fd930749a98e68019f6ba6ac282984d266a4f48fe7a74c2913166f46cb7b17bafdf0a808b367ab3a14866d2465c87988ce023f958277f01
-
SSDEEP
6144:p3Oip/Yr4upi95jTuS/TBSkomd0+lHVOq4rbgC5:JEgDSko5MVG
Malware Config
Signatures
Files
-
fc17dcf7bbd0aef89a80ae006e7e90aa980c806304c8663842f4a1aafe2f90a8.exe windows x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 118KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE