Static task
static1
Behavioral task
behavioral1
Sample
fc37c8663dbc14ec198067543380cf0aab62f34a60cf89e9ffb5141ac141328a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc37c8663dbc14ec198067543380cf0aab62f34a60cf89e9ffb5141ac141328a.exe
Resource
win10v2004-20221111-en
General
-
Target
fc37c8663dbc14ec198067543380cf0aab62f34a60cf89e9ffb5141ac141328a
-
Size
172KB
-
MD5
bc9036aa1c7913ee4c11ee2bf35e0f60
-
SHA1
06994ec6714948916e2861f9575d3da36d1f5e42
-
SHA256
fc37c8663dbc14ec198067543380cf0aab62f34a60cf89e9ffb5141ac141328a
-
SHA512
3ea84760e5d1fa79ab08be3a23e11ec89fa401ca6c0da780c592325fd08f9e881f629a980bea76e314a8bbf6792cb306bc85a22ac2f288ce6d95cd8b2b370068
-
SSDEEP
3072:yaFubCwnbRexqZbZOXsMkoNpQ5+QKklB5FH8K9Tc2qPLw9r:y1b1nsxqZbZrKQIklBTH8K9TuP
Malware Config
Signatures
Files
-
fc37c8663dbc14ec198067543380cf0aab62f34a60cf89e9ffb5141ac141328a.exe windows x86
fa27e3a150c68b226152710d69943e15
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
RtlUnwind
GetAtomNameA
GetACP
GetConsoleOutputCP
TlsAlloc
GetTimeFormatA
MultiByteToWideChar
WriteConsoleA
SetStdHandle
GetDateFormatA
EnumResourceNamesW
GetLocaleInfoA
GetCPInfo
VirtualAlloc
SetFilePointer
TlsGetValue
CreateSemaphoreA
HeapSize
HeapReAlloc
TlsSetValue
GetOEMCP
RaiseException
user32
DispatchMessageA
CharNextA
PeekMessageA
MessageBoxA
GetDesktopWindow
LoadStringA
DispatchMessageW
wsprintfA
rpcrt4
RpcStringFreeA
shell32
SHGetUnreadMailCountW
DragAcceptFiles
SHGetPathFromIDListA
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteExA
SHGetFileInfoA
Shell_NotifyIconA
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 469KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ