Static task
static1
Behavioral task
behavioral1
Sample
fa231f175c69e409bc547c91d2c6446e62b645caf40c59228fecf37109b3e8bf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa231f175c69e409bc547c91d2c6446e62b645caf40c59228fecf37109b3e8bf.exe
Resource
win10v2004-20220812-en
General
-
Target
fa231f175c69e409bc547c91d2c6446e62b645caf40c59228fecf37109b3e8bf
-
Size
117KB
-
MD5
ce94c8c74ee345a911751550844923f0
-
SHA1
18c2e458124668077a390e79e2a10f6dcba48814
-
SHA256
fa231f175c69e409bc547c91d2c6446e62b645caf40c59228fecf37109b3e8bf
-
SHA512
3ac6bd99d06009218eabb032ce549ce6ecd9c8ffe293c8a62101a3552b259d2cbb48a1a047399b9407bc07cc8a542197468b6e15b40611342c75186b2528ece8
-
SSDEEP
3072:W6fbMmoOo2bwDG/wUQw9IGRZmv9m0j/eIwN0oMj:WI4sUG/vfx6lwpM
Malware Config
Signatures
Files
-
fa231f175c69e409bc547c91d2c6446e62b645caf40c59228fecf37109b3e8bf.exe windows x86
e28d971d0394c012964117561c095435
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
CreateEventA
GetCommandLineA
GetVersionExA
GetCurrentProcessId
GetProcAddress
GetStdHandle
GetEnvironmentStrings
IsDebuggerPresent
GetCurrentThread
GetPriorityClass
GetTickCount
CreateMutexA
VirtualAlloc
GetCommandLineW
CreateSemaphoreA
GetModuleHandleA
GetStartupInfoA
user32
LoadIconA
LoadCursorA
LoadCursorFromFileA
GetWindowDC
ReleaseDC
SetWindowTextA
gdi32
GetTextColor
GetTextMetricsA
GetRasterizerCaps
AbortDoc
SetTextAlign
shlwapi
StrFormatByteSizeW
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
memcpy
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ