Static task
static1
Behavioral task
behavioral1
Sample
fab0ebeb63179edd1bb338cfdd2ddea18ab0ba79eaca856516e2812cffa2cc0e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fab0ebeb63179edd1bb338cfdd2ddea18ab0ba79eaca856516e2812cffa2cc0e.exe
Resource
win10v2004-20221111-en
General
-
Target
fab0ebeb63179edd1bb338cfdd2ddea18ab0ba79eaca856516e2812cffa2cc0e
-
Size
245KB
-
MD5
605bf5322c4b39031ded666faf88d645
-
SHA1
4a131c510ae1616231270e6108704587c2baae08
-
SHA256
fab0ebeb63179edd1bb338cfdd2ddea18ab0ba79eaca856516e2812cffa2cc0e
-
SHA512
2303ba8d85a4d4b41b46ee49b237de4a53df03aec9edd78ad892c0532bb144849c3ae54651d757cfdeb702b6dc4ffa02342fbcf1a5424c50cf176435575b856a
-
SSDEEP
6144:2hR+dTb994jt2azxr4dD3zTguw1+U1HBYtuLS0ZUEXj:2X+df99Ot2aID3ndwThB4uLaEz
Malware Config
Signatures
Files
-
fab0ebeb63179edd1bb338cfdd2ddea18ab0ba79eaca856516e2812cffa2cc0e.exe windows x86
4bbcdb64a8505db329f936dd93a028a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextW
shell32
ShellExecuteExW
kernel32
DnsHostnameToComputerNameA
FindClose
FindFirstFileW
lstrcmp
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
oleaut32
DispGetIDsOfNames
DispGetIDsOfNames
VarI1FromDec
CreateErrorInfo
GetActiveObject
VariantInit
SysFreeString
Sections
.text Size: 131KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ