Static task
static1
Behavioral task
behavioral1
Sample
fcc6fe0cc4c3b1ee9bbc3c3bd39710b1aca50228b3aa6f8751c76b169fe695b9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fcc6fe0cc4c3b1ee9bbc3c3bd39710b1aca50228b3aa6f8751c76b169fe695b9.exe
Resource
win10v2004-20221111-en
General
-
Target
fcc6fe0cc4c3b1ee9bbc3c3bd39710b1aca50228b3aa6f8751c76b169fe695b9
-
Size
51KB
-
MD5
684c17a64ef2666a9d1d976a25bf37f5
-
SHA1
53f1b79fbdbbdc88fc645b4c957f2416edba72c2
-
SHA256
fcc6fe0cc4c3b1ee9bbc3c3bd39710b1aca50228b3aa6f8751c76b169fe695b9
-
SHA512
58880d6f5acec99642d6ee0bce59a2b768eda249343fc4b46af2dc381509bfdf2af53d2354e21051e6c10a388b965b75cc964f5bdb9824019d50983c282a375e
-
SSDEEP
1536:CwiM6WLWGODW7mw64z3XrGQP+bYfiecwP+lIaU:CxM6WWWIIbXLBc3g
Malware Config
Signatures
Files
-
fcc6fe0cc4c3b1ee9bbc3c3bd39710b1aca50228b3aa6f8751c76b169fe695b9.exe windows x86
1650e13d6f28e2b3d788cfbe0f2076c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
CopyFileA
CreateEventA
CreateMutexA
DeleteCriticalSection
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
FileTimeToLocalFileTime
FindClose
FreeEnvironmentStringsA
GetCPInfo
GetCommandLineA
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetFileTime
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetPrivateProfileSectionA
GetProcessHeap
GetShortPathNameA
GetStdHandle
GetStringTypeA
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
HeapDestroy
HeapFree
HeapSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
IsBadWritePtr
IsValidLocale
QueryPerformanceCounter
ResumeThread
SetEvent
SetFileAttributesA
SizeofResource
Sleep
TerminateProcess
TlsFree
VirtualProtect
WaitForSingleObject
lstrcmpA
user32
DialogBoxParamA
GetCapture
GetSystemMenu
IsChild
UnhookWindowsHookEx
advapi32
AdjustTokenPrivileges
ChangeServiceConfigA
OpenServiceA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ