Static task
static1
Behavioral task
behavioral1
Sample
faaf48665e6fd5b3d92528901e67010f5fa3f0796aa848541002a1a4783e20a5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
faaf48665e6fd5b3d92528901e67010f5fa3f0796aa848541002a1a4783e20a5.exe
Resource
win10v2004-20221111-en
General
-
Target
faaf48665e6fd5b3d92528901e67010f5fa3f0796aa848541002a1a4783e20a5
-
Size
156KB
-
MD5
b537590e5d9eb7a336a8cc787364e73c
-
SHA1
ff40a4832e44392387e3e4d29a5207f62bbc19f4
-
SHA256
faaf48665e6fd5b3d92528901e67010f5fa3f0796aa848541002a1a4783e20a5
-
SHA512
f0d416e755943d59a8da53c45d861ff2ddd5ea7c0b3ee9e1722112643643c8a44bba1286dda749c9f672dbc6bf4a0c264368907f9dd884f234ac3ceef6ab16db
-
SSDEEP
1536:1T3pUy1ohP+VBBY5rot3pWZw7gGHQ6omHju:x3+ymx+DBY5Y3pzxw6oi6
Malware Config
Signatures
Files
-
faaf48665e6fd5b3d92528901e67010f5fa3f0796aa848541002a1a4783e20a5.exe windows x86
817813a56b0dead0abab7437f6589f64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
CreateMenu
AppendMenuA
GetMenu
InsertMenuA
EnableMenuItem
DrawMenuBar
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
kernel32
LoadLibraryA
CloseHandle
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
HeapValidate
IsBadReadPtr
IsBadWritePtr
SetConsoleCtrlHandler
GetLastError
RtlUnwind
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
Sections
.text Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ