Static task
static1
Behavioral task
behavioral1
Sample
fc25152283f00a545b2d40e7a83d57f2bc532d72ad2637ef15f99d34a619c052.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc25152283f00a545b2d40e7a83d57f2bc532d72ad2637ef15f99d34a619c052.exe
Resource
win10v2004-20221111-en
General
-
Target
fc25152283f00a545b2d40e7a83d57f2bc532d72ad2637ef15f99d34a619c052
-
Size
828KB
-
MD5
5baf90e0238394d25428509753adf764
-
SHA1
f47e48e5e7a1bec0b6d886548eb9d008ac365205
-
SHA256
fc25152283f00a545b2d40e7a83d57f2bc532d72ad2637ef15f99d34a619c052
-
SHA512
9f92fbe1271c8ac0946376e2a8574e1eeccfcdbc137d7948bf175629c19f6dfa0dd8a2db966d5d8fdfcca2c1446f21906a8cb442ac8a736cfe62c0d96fb2be36
-
SSDEEP
24576:NNKKsDjopXy5GxWVFYd5xjoAL+3LxIjnbtoxsS7sf:zKbD+Xy5GYTil/S3Lx7iS7M
Malware Config
Signatures
Files
-
fc25152283f00a545b2d40e7a83d57f2bc532d72ad2637ef15f99d34a619c052.exe windows x86
e30f5bece04f11eccbe96129c596f844
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
DeleteFileA
MoveFileExA
GetModuleFileNameA
GetSystemDirectoryA
CopyFileA
CloseHandle
WriteFile
LockResource
CreateFileA
LoadResource
SizeofResource
FindResourceA
WinExec
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
Process32Next
Process32First
Sleep
GetModuleHandleA
GetStartupInfoA
user32
RegisterClassA
LoadIconA
LoadCursorA
DefWindowProcA
CreateWindowExA
DispatchMessageA
TranslateMessage
GetWindowTextA
ShowWindow
GetWindowThreadProcessId
SetTimer
GetForegroundWindow
FindWindowExA
GetMessageA
shell32
SHGetSpecialFolderPathA
ws2_32
WSAStartup
WSACleanup
wininet
InternetOpenA
InternetOpenUrlA
msvcp60
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
msvcrt
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
__p__commode
_exit
??1type_info@@UAE@XZ
free
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_access
fclose
fprintf
fopen
strrchr
strcat
fgets
strlen
__CxxFrameHandler
strstr
strcmp
??0exception@@QAE@ABV0@@Z
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Fi7ke Size: 4KB - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE