Static task
static1
Behavioral task
behavioral1
Sample
fefa55ee45acf78ca5858e47d984d6c79578e23563a2ba427061cab32ae18cc6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fefa55ee45acf78ca5858e47d984d6c79578e23563a2ba427061cab32ae18cc6.exe
Resource
win10v2004-20221111-en
General
-
Target
fefa55ee45acf78ca5858e47d984d6c79578e23563a2ba427061cab32ae18cc6
-
Size
2.1MB
-
MD5
5dfc3f36f77c610920f9dad730bb7e31
-
SHA1
777a455afd521e12dc97095e3d4c5814517c34c9
-
SHA256
fefa55ee45acf78ca5858e47d984d6c79578e23563a2ba427061cab32ae18cc6
-
SHA512
3147c0795c2599fef262c5f1cd2f6d0fad352d810764085d200662dfaaecd471d95852cf98454eaaa6bde963857fa03250832dec72462f031a300335c12d2fdc
-
SSDEEP
24576:H4LYJvVVULw2KD6Wg+owVpUQ77+DFBIaWZDBWD4se0:H4LIUkthdFPUQv+nvWZlc20
Malware Config
Signatures
Files
-
fefa55ee45acf78ca5858e47d984d6c79578e23563a2ba427061cab32ae18cc6.exe windows x86
47d3556130a827425c2a100df7fd691b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CloseHandle
GetFileSize
HeapReAlloc
CopyFileA
DeleteFileA
HeapReAlloc
CreateFileA
GlobalFree
HeapFree
FindFirstFileA
FindResourceA
ReadFile
FindNextFileA
HeapFree
CreateMutexW
CreateMutexA
GetStdHandle
FindResourceA
FindNextVolumeA
GetFileTime
GetFileSize
HeapAlloc
DeleteFileW
FindFirstFileA
ReadFile
CreateMutexW
GetCPInfo
DeleteFileW
GlobalFree
GlobalAlloc
CreateFileA
GetFileSize
WriteFile
DeleteFileW
GetComputerNameA
OpenFileMappingA
FindResourceW
GetComputerNameA
FindNextFileA
CloseHandle
OpenFileMappingA
FindResourceW
FindFirstFileA
CloseHandle
AddAtomA
OpenFileMappingA
GetComputerNameA
CreateMutexW
DeleteFileA
CreateMutexA
CopyFileA
FindResourceW
FindNextFileA
HeapReAlloc
GetFileTime
CloseHandle
CreateDirectoryA
WriteFile
HeapFree
Sleep
GetFileSize
GlobalFree
GlobalFree
HeapAlloc
Sleep
ExitProcess
HeapFree
WriteFile
GetStdHandle
CreateDirectoryA
ReadFile
GetFileTime
GetCPInfo
OpenFileMappingA
ExitProcess
FindResourceA
GlobalFree
CreateMutexW
FindResourceW
Sleep
CopyFileA
CreateMutexW
DeleteFileA
GetCPInfo
CreateMutexA
AddAtomA
GetComputerNameA
CreateDirectoryA
FindFirstFileA
GetComputerNameA
DeleteFileW
GetStdHandle
GetFileTime
OpenFileMappingA
FindResourceA
GlobalAlloc
CreateFileA
FindResourceA
GetStdHandle
ReadFile
AddAtomA
GlobalAlloc
GetFileSize
FindFirstFileA
CreateMutexA
GlobalFree
CreateMutexW
CreateMutexW
DeleteFileA
OpenFileMappingA
CreateMutexW
FindNextFileA
FindResourceA
Sleep
AddAtomA
HeapFree
GetComputerNameA
FindNextVolumeA
GlobalFree
HeapFree
CreateDirectoryA
ReadFile
FindResourceW
AddAtomA
GetStdHandle
DeleteFileA
CloseHandle
CreateDirectoryA
WriteFile
FindNextVolumeA
HeapAlloc
HeapReAlloc
GlobalAlloc
ExitProcess
CopyFileA
WriteFile
HeapReAlloc
DeleteFileW
GetFileSize
HeapAlloc
CloseHandle
WriteFile
CreateFileA
CreateFileA
FindNextFileA
DeleteFileW
GetCPInfo
AddAtomA
FindNextFileA
CreateFileA
GetStdHandle
CreateFileA
CreateMutexA
CreateMutexW
FindFirstFileA
WriteFile
WriteFile
GlobalFree
CreateMutexW
CloseHandle
FindResourceA
CreateMutexW
GetCPInfo
OpenFileMappingA
Sleep
CopyFileA
DeleteFileA
CreateDirectoryA
OpenFileMappingA
CreateMutexA
FindResourceA
HeapFree
CloseHandle
FindFirstFileA
GetComputerNameA
GetFileSize
GetStdHandle
FindNextFileA
ReadFile
CloseHandle
AddAtomA
Sleep
GetFileSize
FindResourceA
GetFileTime
CreateMutexW
FindResourceW
HeapFree
DeleteFileA
Sleep
CreateDirectoryA
HeapFree
CreateFileA
GlobalFree
CloseHandle
GetStdHandle
FindResourceA
GetComputerNameA
GetCPInfo
GetFileTime
Sleep
GetComputerNameA
GetFileTime
GlobalFree
FindResourceA
ExitProcess
GetCPInfo
GlobalFree
FindResourceW
GetComputerNameA
HeapReAlloc
FindNextFileA
GetStdHandle
CreateDirectoryA
OpenFileMappingA
FindResourceW
CreateMutexA
CloseHandle
CloseHandle
FindNextFileA
AddAtomA
CreateDirectoryA
ReadFile
GlobalAlloc
WriteFile
DeleteFileA
GlobalAlloc
GlobalFree
OpenFileMappingA
GetFileSize
FindNextFileA
GetFileSize
ExitProcess
HeapReAlloc
CreateMutexA
HeapFree
CreateMutexW
FindResourceW
HeapReAlloc
AddAtomA
Sections
code Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ