Static task
static1
Behavioral task
behavioral1
Sample
fdcc8b2e0d0de2e85ee6fcf2c3d7edca1e25889775a5f8b7545cc73bbc25ebe0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fdcc8b2e0d0de2e85ee6fcf2c3d7edca1e25889775a5f8b7545cc73bbc25ebe0.exe
Resource
win10v2004-20220901-en
General
-
Target
fdcc8b2e0d0de2e85ee6fcf2c3d7edca1e25889775a5f8b7545cc73bbc25ebe0
-
Size
50KB
-
MD5
8f37f397b9d9f3d609a6a4e5a4d8b4ab
-
SHA1
32fecfbc1336b222ed5f2ea00fb12a88d159385b
-
SHA256
fdcc8b2e0d0de2e85ee6fcf2c3d7edca1e25889775a5f8b7545cc73bbc25ebe0
-
SHA512
8c5e450c859e6b72aef29adfb46e7c65e81ab89bab16fd3a95ea13fb85fe83a898ec2b698d87b047a6b14da6d7c5d04602f5cb2ec801cf965c053d064c2efd1a
-
SSDEEP
768:IRySoGpNYeY1CEsYYpTyhsqc8gV7p3kEEDoXnhd2r/VuNPp3z:IIGpNYBzYpi7k75kEmuNh3
Malware Config
Signatures
Files
-
fdcc8b2e0d0de2e85ee6fcf2c3d7edca1e25889775a5f8b7545cc73bbc25ebe0.exe windows x86
0985e6fd80ced9b7e6301b0fad356317
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetModuleHandleA
GetProcAddress
ReadProcessMemory
GetCurrentProcess
GetTickCount
Sleep
VirtualProtectEx
TerminateProcess
VirtualAlloc
GetSystemTime
FindResourceA
LoadResource
LockResource
SizeofResource
VirtualQueryEx
GetModuleFileNameA
CreateFileW
GetLastError
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
MultiByteToWideChar
HeapReAlloc
HeapSize
LoadLibraryW
GetStringTypeW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
WriteConsoleW
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ