Static task
static1
Behavioral task
behavioral1
Sample
fcdb5ca677a29bebbecd9f04b1c9903edfb682ece90877b727df5e050c9e0a6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcdb5ca677a29bebbecd9f04b1c9903edfb682ece90877b727df5e050c9e0a6f.exe
Resource
win10v2004-20220812-en
General
-
Target
fcdb5ca677a29bebbecd9f04b1c9903edfb682ece90877b727df5e050c9e0a6f
-
Size
92KB
-
MD5
2599e28eebbe339400a4e788b0fd7979
-
SHA1
380a6efe64b3da009f6aa7220e6bf21214713d4b
-
SHA256
fcdb5ca677a29bebbecd9f04b1c9903edfb682ece90877b727df5e050c9e0a6f
-
SHA512
dbf7cbf619fec6c21f9cff887d6ee28e5cf46cd950a30bdebbdb56f9c3780c19b8a4ed8f8a68337436939250d4efeaaca6d0a6d5a2109743aef0692ea8eddeec
-
SSDEEP
1536:6x5Wyv07N7AzKJNsQr/eOvolmKWzyO3zX2zlfGVH/9Inxk9Ck+8i8TNmgYp9JmAL:6DWyv07N4tMWyOItVd+b+dK9lL
Malware Config
Signatures
Files
-
fcdb5ca677a29bebbecd9f04b1c9903edfb682ece90877b727df5e050c9e0a6f.exe windows x86
20a59bf18b36f561529ba52fd002b8a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
__p__fmode
__set_app_type
__setusermatherr
strstr
_initterm
atoi
_acmdln
__getmainargs
free
sprintf
fclose
signal
sqrt
__p__commode
calloc
_exit
fprintf
memmove
_errno
exit
_adjust_fdiv
comdlg32
GetOpenFileNameA
kernel32
GetEnvironmentStrings
GetLocalTime
IsBadReadPtr
GetStringTypeExA
GetStartupInfoA
lstrcatA
GlobalReAlloc
CompareStringW
GetNumberFormatA
DeleteFileW
OpenProcess
FileTimeToDosDateTime
GetUserDefaultLangID
GlobalUnlock
user32
SetDlgItemTextA
ScreenToClient
GetDlgItem
GetDesktopWindow
EnableMenuItem
DestroyCursor
IsWindowVisible
GetSysColor
PostMessageA
SetWindowTextA
DeleteMenu
LoadCursorA
DrawEdge
advapi32
CryptDestroyHash
RegSetValueExA
CryptReleaseContext
CloseServiceHandle
GetLengthSid
LookupPrivilegeValueW
DeleteService
OpenSCManagerW
InitializeAcl
CheckTokenMembership
CopySid
RegSetValueExW
RegQueryInfoKeyA
RegQueryValueExA
InitializeSecurityDescriptor
OpenServiceA
AdjustTokenPrivileges
SetSecurityDescriptorDacl
RegOpenKeyA
DeregisterEventSource
SetSecurityDescriptorGroup
CryptAcquireContextA
RegCreateKeyExW
comctl32
ImageList_DragLeave
CreateToolbarEx
ImageList_Read
ImageList_DrawEx
ImageList_Add
ImageList_Remove
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_DragEnter
ImageList_GetImageInfo
InitCommonControls
gdi32
UnrealizeObject
TranslateCharsetInfo
CombineRgn
GetPaletteEntries
GetTextCharsetInfo
GetTextMetricsA
SetPixel
ole32
StgOpenStorageOnILockBytes
CoCreateInstance
CoGetClassObject
CreateILockBytesOnHGlobal
DoDragDrop
PropVariantClear
IsAccelerator
RegisterDragDrop
CoTaskMemFree
OleRun
CoLoadLibrary
ReleaseStgMedium
RevokeDragDrop
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ