Static task
static1
Behavioral task
behavioral1
Sample
fcb02bee15d5a879abc3d50a4b404251e13393fdcf331469736fdbcb2e51da56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcb02bee15d5a879abc3d50a4b404251e13393fdcf331469736fdbcb2e51da56.exe
Resource
win10v2004-20220812-en
General
-
Target
fcb02bee15d5a879abc3d50a4b404251e13393fdcf331469736fdbcb2e51da56
-
Size
136KB
-
MD5
b099eccc0152bf38b1394a6530c59d70
-
SHA1
b315bc1f82278a1044c3aea5c7313cedf5743021
-
SHA256
fcb02bee15d5a879abc3d50a4b404251e13393fdcf331469736fdbcb2e51da56
-
SHA512
8d07c5833b9fd67dc10ef481256b4be4d97e086f95d91e24b1b226cbdf75b458a911e344a7ab2cb6297528f2a23cd474bf1b6c337b14b746b03c2d1aa175009a
-
SSDEEP
3072:TEmFTUcJnJ7KEXxf/+fAs4A4V5h0K3YM8R2H:5zJn9jBsU+K3YM8Ro
Malware Config
Signatures
Files
-
fcb02bee15d5a879abc3d50a4b404251e13393fdcf331469736fdbcb2e51da56.exe windows x86
66b5bd2e4d8e0ef768db1435ab283bd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
_getdrives
_getdiskfree
_pwctype_dll
iswprint
_mbbtombc
_acmdln_dll
sprintf
atol
strxfrm
__threadhandle
_memccpy
__threadid
_strerror
wcscmp
_ismbbalnum
_itoa
isspace
iswupper
_lfind
raise
_iob
_mbctype
_control87
_mbspbrk
wcstok
acos
_wtol
malloc
_ismbbprint
localeconv
_assert
__GetMainArgs
_umask
_ismbbkpunct
rewind
vprintf
iswlower
_mbctokata
_mbsspn
msvcrt20
?opfx@ostream@@QAEHXZ
??4iostream@@IAEAAV0@PAVstreambuf@@@Z
swscanf
?cerr@@3Vostream_withassign@@A
_lrotl
??0ios@@IAE@XZ
fputws
_adj_fptan
iswgraph
??0istream@@QAE@PAVstreambuf@@@Z
_tcsnbcnt
?peek@istream@@QAEHXZ
_rmdir
__p__wcmdln
__p__environ
_winver
_mbsicmp
_getdiskfree
?flush@ostream@@QAEAAV1@XZ
_logb
_assert
?seekoff@strstreambuf@@UAEJJW4seek_dir@ios@@H@Z
_wasctime
??_Estrstreambuf@@UAEPAXI@Z
??_Diostream@@QAEXXZ
__p___argv
_CIlog
putchar
??1Iostream_init@@QAE@XZ
?osfx@ostream@@QAEXXZ
??0fstream@@QAE@PBDHH@Z
_strupr
_except_handler2
_sys_nerr
_tcscmp
_tcsclen
_mbsnbcnt
swprintf
?unlockc@ios@@KAXXZ
_HUGE
kernel32
DeleteFileW
SetFileTime
GetConsoleInputWaitHandle
DeleteTimerQueueTimer
DeleteCriticalSection
HeapLock
SetThreadExecutionState
SetCurrentDirectoryA
WriteConsoleW
GetDriveTypeA
LoadLibraryA
PrepareTape
VirtualProtectEx
lstrcat
GetNamedPipeInfo
ExitProcess
UnlockFile
GetConsoleKeyboardLayoutNameW
GlobalCompact
SetLastConsoleEventActive
VirtualAlloc
EnterCriticalSection
IsBadHugeReadPtr
GetStartupInfoA
VerLanguageNameW
lstrcmpiW
GetSystemTimeAdjustment
ReplaceFile
BeginUpdateResourceW
GetAtomNameA
DelayLoadFailureHook
GetVolumePathNameA
GetDiskFreeSpaceA
LeaveCriticalSection
SetLocalTime
ReadConsoleOutputCharacterA
GetNumberFormatA
SetConsoleKeyShortcuts
FormatMessageA
msvcp60
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??_F?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBG@Z
?nothrow@std@@3Unothrow_t@1@B
?overflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
??1runtime_error@std@@UAE@XZ
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@JFF@Z
?__Fiopen@std@@YAPAU_iobuf@@PBDH@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?widen@?$ctype@D@std@@QBEDD@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?infinity@?$numeric_limits@J@std@@SAJXZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PAG0ABV12@@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?arg@std@@YAMABV?$complex@M@1@@Z
?denorm_min@?$numeric_limits@F@std@@SAFXZ
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
?round_error@?$numeric_limits@D@std@@SADXZ
??1?$collate@G@std@@UAE@XZ
?imag@?$_Complex_base@M@std@@QBEMXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
expsrv
rtBoolFromErrVar
rtcSetTimeVar
__vbaCyErrVar
rtcRandomNext
__vbaVargVarCopy
EbResetProject
_adj_fprem1
__vbaEraseNoPop
__vbaCySgn
__vbaPrintObj
rtcFileLength
__vbaVarSetVar
rtcLowerCaseBstr
rtcGetFileAttr
__vbaRedimPreserve
__vbaDateR8
__vbaExceptHandler
rtcGetMinuteOfHour
GetMem2
__vbaI2Sgn
__vbaUnkVar
__vbaFpCy
rtcIPMT
rtcBstrFromChar
__vbaCyMulI2
__vbaLdZeroAry
__vbaVarIndexLoadRefLock
__vbaVarSetVarAddref
__vbaStrDate
oleaut32
SafeArrayDestroyDescriptor
SafeArrayAllocDescriptor
SafeArrayGetDim
VarR4FromI1
VarI8FromR8
VarCyNeg
VarI2FromUI1
VarI4FromR8
VarCyFromI2
VarUI2FromCy
VarDecFromR8
LPSAFEARRAY_Marshal
VarI2FromI4
VarFix
VARIANT_UserSize
SafeArrayGetElemsize
VarI2FromDate
VarR4FromDec
SetErrorInfo
VarI4FromDate
VarInt
VarUI4FromCy
VarR8FromI1
OaBuildVersion
VarI4FromI2
BSTR_UserFree
OleCreateFontIndirect
VarR8Pow
SafeArrayDestroy
VarI2FromUI2
VarDateFromR4
VarBoolFromCy
VarI2FromR4
VarUI1FromBool
LPSAFEARRAY_Size
ntdll
ZwDeleteBootEntry
ZwAddAtom
_fltused
ZwCancelTimer
NtReadVirtualMemory
RtlHashUnicodeString
RtlNewSecurityObject
RtlUnicodeStringToAnsiSize
ZwDisplayString
RtlSplay
DbgQueryDebugFilterState
ZwCallbackReturn
_ultow
ZwOpenFile
RtlDeleteAtomFromAtomTable
sqrt
NtCreateJobObject
NtEnumerateBootEntries
NtAdjustPrivilegesToken
NtDuplicateToken
ZwCreateSymbolicLinkObject
RtlUnhandledExceptionFilter2
RtlMapSecurityErrorToNtStatus
NtQueueApcThread
NtQueryEaFile
NtTerminateProcess
RtlApplyRXactNoFlush
pdh
PdhTranslate009CounterA
PdhSelectDataSourceW
PdhVbUpdateLog
PdhAdd009CounterW
PdhGetDefaultPerfCounterA
PdhVbGetLogFileSize
PdhLookupPerfIndexByNameA
PdhEnumLogSetNamesA
PdhComputeCounterStatistics
PdhEnumObjectItemsW
PdhGetLogFileTypeA
PdhBrowseCountersW
PdhGetRawCounterValue
PdhEnumMachinesHW
PdhGetRawCounterArrayA
PdhGetFormattedCounterValue
PdhMakeCounterPathW
PdhEnumObjectItemsHA
PdhGetCounterInfoW
PdhEnumObjectsHW
PdhGetLogSetGUID
PdhBrowseCountersHA
PdhGetDataSourceTimeRangeW
PdhTranslate009CounterW
PdhCloseQuery
PdhRemoveCounter
PdhGetCounterTimeBase
PdhCollectQueryData
PdhGetFormattedCounterArrayW
PdhOpenQueryH
PdhUpdateLogA
PdhTranslateLocaleCounterW
PdhLookupPerfNameByIndexW
utildll
CalculateElapsedTime
CachedGetUserFromSid
SetupAsyncCdConfig
GetSystemMessageW
WinEnumerateDevices
ParseDecoratedAsyncDeviceName
InitializeAnonymousUserCompareList
RegGetNetworkServiceName
TestUserForAdmin
CompareElapsedTime
StrSystemWaitReason
FormDecoratedAsyncDeviceName
NetworkDeviceEnumerate
ElapsedTimeString
StrSdClass
ConfigureModem
IsPartOfDomain
GetAssociatedPortName
HaveAnonymousUsersChanged
StandardErrorMessage
CurrentDateTimeString
InstallModem
RegGetNetworkDeviceName
AsyncDeviceEnumerate
GetSystemMessageA
GetUnknownString
EnumerateMultiUserServers
QueryCurrentWinStation
StrConnectState
StrAsyncConnectState
CalculateDiffTime
StrProcessState
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ