Static task
static1
Behavioral task
behavioral1
Sample
fe1761156a46c37144e5b782c1715afd7de8baa98cfb415f39881dc786702f0b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe1761156a46c37144e5b782c1715afd7de8baa98cfb415f39881dc786702f0b.exe
Resource
win10v2004-20221111-en
General
-
Target
fe1761156a46c37144e5b782c1715afd7de8baa98cfb415f39881dc786702f0b
-
Size
202KB
-
MD5
a92f6d7322edd7dde2d5c42872d5b703
-
SHA1
2d7763a1dc2c915e996d6f951ba224a42357b332
-
SHA256
fe1761156a46c37144e5b782c1715afd7de8baa98cfb415f39881dc786702f0b
-
SHA512
cd6e8b1567f224ad926af7a1f001365ebf6b30ab65e1cd5a391d91d8c67825b5c0e330cc1e52dccf1b79f924b981410d1336c93e75bccfc6bbfa1ab9d61dfad0
-
SSDEEP
3072:RiseqVhYsBKUhGRiircqiBF6IXLYlLbByVzqT0K/O4iVsE2XcdUMNrdXQM9e:Usj4sIRJmF6iLYlSzqT0KYVsELUMsEe
Malware Config
Signatures
Files
-
fe1761156a46c37144e5b782c1715afd7de8baa98cfb415f39881dc786702f0b.exe windows x86
177ac351046112187cd624cc7f8f5405
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFiber
GetACP
TerminateProcess
GetLocaleInfoA
GetSystemInfo
InterlockedCompareExchange
ResumeThread
UnhandledExceptionFilter
HeapAlloc
VirtualQuery
SetUnhandledExceptionFilter
LoadLibraryA
HeapReAlloc
VirtualFree
HeapSize
HeapCreate
EnumResourceNamesA
RtlUnwind
SetThreadPriority
HeapDestroy
GetProcAddress
VirtualProtect
GetCommandLineA
IsProcessorFeaturePresent
ExitProcess
IsDebuggerPresent
VirtualAlloc
WriteFile
user32
OffsetRect
EqualRect
ReleaseDC
SetWindowPos
GetClientRect
CharNextA
SetWindowLongA
CreateWindowExA
LoadCursorA
InvalidateRect
PtInRect
RegisterClassExA
EndPaint
GetFocus
UnionRect
RealGetWindowClassA
SetFocus
GetKeyState
GetDC
BeginPaint
IsChild
ShowWindow
UnregisterClassA
IntersectRect
DefWindowProcA
wsprintfA
IsWindow
SetWindowRgn
GetWindowLongA
CallWindowProcA
GetParent
GetClassInfoExA
DestroyWindow
setupapi
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ