Static task
static1
Behavioral task
behavioral1
Sample
facbf68d0fa54c4bcfb6b2639432c49cbaf786026ee2f34e665cfc8f6213dc85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
facbf68d0fa54c4bcfb6b2639432c49cbaf786026ee2f34e665cfc8f6213dc85.exe
Resource
win10v2004-20221111-en
General
-
Target
facbf68d0fa54c4bcfb6b2639432c49cbaf786026ee2f34e665cfc8f6213dc85
-
Size
748KB
-
MD5
27c6841013310a9f8b4761be4bed8ce7
-
SHA1
a46fb1909fe2c7721eeb7e14e3ef11347bb3a3f3
-
SHA256
facbf68d0fa54c4bcfb6b2639432c49cbaf786026ee2f34e665cfc8f6213dc85
-
SHA512
e5e20ef0f608d8451471848fec75b074ae6a7fae62f86cb58416940c6580bbfd4096b33bac1c2e26ebb0bcad6e5f6a5c9910fb8757785676e1458dda8095082e
-
SSDEEP
12288:WtgE36ruQmPwYXTA4SO0gs7a3pu5VBgY/pTVbyROBqYvLxqEw/byb9bGWp:Wtbgu6U0M0F7E05VBgYRVbrBqQ9qx4bG
Malware Config
Signatures
Files
-
facbf68d0fa54c4bcfb6b2639432c49cbaf786026ee2f34e665cfc8f6213dc85.exe windows x86
6f8b65efc60d1870695d6b2a59283e9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetDriveTypeA
WriteFile
CreateSemaphoreA
FindVolumeClose
LocalSize
WaitForMultipleObjects
CloseHandle
lstrlenA
HeapFree
GetFileType
CreateDirectoryA
GetFileAttributesA
VirtualQuery
GetCurrentDirectoryW
IsBadReadPtr
GetFileTime
GetCurrentThreadId
FindVolumeClose
HeapCreate
ExitThread
GetModuleHandleA
CancelIo
FindClose
GetModuleFileNameA
uxtheme
CloseThemeData
CloseThemeData
GetThemeTextMetrics
GetThemeBool
GetThemeTextExtent
GetThemeColor
GetWindowTheme
IsThemeActive
OpenThemeData
DrawThemeBackground
DrawThemeEdge
SetWindowTheme
GetThemeSysSize
fmifs
Extend
Extend
Extend
Extend
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE