Static task
static1
Behavioral task
behavioral1
Sample
fec3fd9af6cfc8f9c76067407fd19248bfe82f509f89badcb779c70bff276b47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fec3fd9af6cfc8f9c76067407fd19248bfe82f509f89badcb779c70bff276b47.exe
Resource
win10v2004-20220812-en
General
-
Target
fec3fd9af6cfc8f9c76067407fd19248bfe82f509f89badcb779c70bff276b47
-
Size
21KB
-
MD5
8ed212aa2a09d593aa2938d55bffa036
-
SHA1
6203dc60d9ca212d5f8dc05aabc713d9c77a60c3
-
SHA256
fec3fd9af6cfc8f9c76067407fd19248bfe82f509f89badcb779c70bff276b47
-
SHA512
6078cbea0d1a2d652d678f87e8e8fff7968204d639d57dc89f40fefb64ffdb0c581d013c045abbfe5fca3bfdcd9445fbbc670107a294b333ab4dd94e1bb8085c
-
SSDEEP
384:YUVguH4NZZ2nt5yrtwsBHwzQhL+ybVcRPLM7P:qxNZZ2ngw796c5Q7P
Malware Config
Signatures
Files
-
fec3fd9af6cfc8f9c76067407fd19248bfe82f509f89badcb779c70bff276b47.exe windows x86
0d9544e4cfcc4ec56b928417b3e27c16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
UnregisterHotKey
UnhookWindowsHookEx
TranslateMessage
ShowWindow
SetWindowsHookExA
SetWindowPos
SetWindowLongA
SetTimer
SetRect
SetForegroundWindow
SendMessageA
RegisterHotKey
RegisterClassExA
PostQuitMessage
LoadIconA
KillTimer
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetSysColor
GetMessageA
GetForegroundWindow
GetDlgItemTextA
GetClientRect
GetClassNameA
FillRect
EnumWindows
EndPaint
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallNextHookEx
BeginPaint
kernel32
lstrlenW
lstrlenA
lstrcpyW
lstrcpyA
lstrcmpA
lstrcatW
lstrcatA
WideCharToMultiByte
Sleep
SetFileTime
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetFileTime
GetEnvironmentVariableA
GetCurrentThreadId
GetCommandLineA
ExitProcess
CreateThread
CreateFileW
CopyFileA
CloseHandle
comctl32
InitCommonControls
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
gdi32
CreateSolidBrush
SelectObject
SetBkMode
SetTextColor
CreateFontIndirectA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ