Static task
static1
Behavioral task
behavioral1
Sample
fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69.exe
Resource
win10v2004-20221111-en
General
-
Target
fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69
-
Size
172KB
-
MD5
f32d61589ec6874ebe2bf1de2feb5548
-
SHA1
3b494bfe93a3ca09aeba2779756df37c2ceff4e3
-
SHA256
fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69
-
SHA512
4d5f050d28fe2cd24150f6a04a6e05fd57b3c9ab928493d09338b30592dacda67f5aaea5d89e323384e46140ffbf22525d876bb3b5b84c0188fb0ac50fbabfad
-
SSDEEP
3072:Pgqw8WIL6q4hrpvB5KMcpnK2W5HoA9jtxG6fgYA31UBrKws:Pgqw8WIL6nxdKM2KfHHjnIxOBDs
Malware Config
Signatures
Files
-
fecd649cc13ddfc4aa0f610a64c9c860d7fb05e7fc41a2d3614b73a736976e69.exe windows x86
a81f86dedb590ef013f7fb22a3106102
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
oleacc
CreateStdAccessibleObject
kernel32
IsDebuggerPresent
GetCurrentThreadId
SetUnhandledExceptionFilter
GlobalFindAtomW
QueryPerformanceCounter
GetStartupInfoA
FoldStringW
VirtualProtect
GetCurrentProcessId
GetModuleHandleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
EnumResourceLanguagesA
LocalAlloc
GetSystemTimeAsFileTime
GetProcessHeap
GetPrivateProfileSectionW
GetTickCount
GetLocaleInfoW
InterlockedCompareExchange
InterlockedExchange
DeleteFileW
shlwapi
GetAcceptLanguagesA
PathRemoveFileSpecW
PathFindExtensionW
PathCreateFromUrlW
UrlUnescapeW
StrCmpIW
PathAppendW
PathIsRelativeW
UrlCreateFromPathW
PathCombineW
Sections
.text Size: 86KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ