Static task
static1
Behavioral task
behavioral1
Sample
fc785d81b63a286788734f736eb4450e7a3cc36253da0d25e13009e5b82bd1e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc785d81b63a286788734f736eb4450e7a3cc36253da0d25e13009e5b82bd1e1.exe
Resource
win10v2004-20220812-en
General
-
Target
fc785d81b63a286788734f736eb4450e7a3cc36253da0d25e13009e5b82bd1e1
-
Size
75KB
-
MD5
b7f967a2e33948790be294921fe5a7b5
-
SHA1
eff075f311107901abbae59b4a4f50bf3feb289a
-
SHA256
fc785d81b63a286788734f736eb4450e7a3cc36253da0d25e13009e5b82bd1e1
-
SHA512
32885c9ab4722fc99994256b6f01638a9aba3dac53c4cb07385cb681d1441c7ca2e2d4c2aed0cc54ec0d60aacfad1241b59c882318fd752fa1b698c4d7b618f8
-
SSDEEP
768:a7aYwFE9oOMLGncxDYJR59n5OYwU030QPULMf9WDs17CHBOE:aZL1naOR59Y5sQ2Mf9UQ7CD
Malware Config
Signatures
Files
-
fc785d81b63a286788734f736eb4450e7a3cc36253da0d25e13009e5b82bd1e1.exe windows x86
5aa989e5c2d91db86f71ede24401d8da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
user32
MessageBoxA
msvcrt
rand
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
+ Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
- Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
= Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
StayUnde Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE