Static task
static1
Behavioral task
behavioral1
Sample
fae1eea87f245ee9840ecce9ec5bd8a99957fa85d6145d68c84d384c7b3ba088.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fae1eea87f245ee9840ecce9ec5bd8a99957fa85d6145d68c84d384c7b3ba088.exe
Resource
win10v2004-20220812-en
General
-
Target
fae1eea87f245ee9840ecce9ec5bd8a99957fa85d6145d68c84d384c7b3ba088
-
Size
84KB
-
MD5
503fbfbbb225cc1244a8b508b3ffd917
-
SHA1
89664fb02dea24c3adbb40cefa85e72eeaad2c19
-
SHA256
fae1eea87f245ee9840ecce9ec5bd8a99957fa85d6145d68c84d384c7b3ba088
-
SHA512
d8bdbcf4b574354be459ffaa0df095e676cadbebef271e9f20be361ec9b66494e0cc6c5883eb425a68be4addc644aafa29fcbcdac307b3d9e736c7f9ab689cc6
-
SSDEEP
768:8Nqpc/6UDnz71S/VhiaC6x6w77GFyE2SXta/xwO/P3ENxZdDWftq+4NdmV1wJAQE:8b6AXUFLrata/+xqfY+4N0VboSedcy
Malware Config
Signatures
Files
-
fae1eea87f245ee9840ecce9ec5bd8a99957fa85d6145d68c84d384c7b3ba088.exe windows x86
5c437ea84edc8606698958f77da5b158
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sleep
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
CreateThread
TerminateThread
WideCharToMultiByte
GetLocalTime
WinExec
DeleteFileA
CopyFileA
GetLastError
SetConsoleCtrlHandler
MoveFileExA
GetCurrentDirectoryA
FindClose
FindFirstFileA
SetCurrentDirectoryA
CreateDirectoryA
GetWindowsDirectoryA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
SetEndOfFile
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
user32
wsprintfA
ws2_32
inet_addr
htons
ntohs
htonl
ntohl
inet_ntoa
wpcap
pcap_freealldevs
pcap_findalldevs
pcap_open_live
pcap_close
pcap_loop
pcap_sendpacket
pcap_breakloop
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE