Static task
static1
Behavioral task
behavioral1
Sample
fd0a02c26c6c5a166bdbf2dac7fe5d78b6e1593cf209412daadcb431923f533f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd0a02c26c6c5a166bdbf2dac7fe5d78b6e1593cf209412daadcb431923f533f.exe
Resource
win10v2004-20220901-en
General
-
Target
fd0a02c26c6c5a166bdbf2dac7fe5d78b6e1593cf209412daadcb431923f533f
-
Size
330KB
-
MD5
b02a014d5deb7d392685900394d92e48
-
SHA1
75790d8600b3ec6a0fcb9a8a3e69c6d5f1cba5a6
-
SHA256
fd0a02c26c6c5a166bdbf2dac7fe5d78b6e1593cf209412daadcb431923f533f
-
SHA512
a6389eaf4d52684daa51d0210fedf010f266548ec421e1b6df02e30ba2c67159974ce2267611e2d3149752d3bb9576fc1f06698470ae2281ea5c7be566e9566a
-
SSDEEP
6144:piLHnviIkzIsHFd1ZN6a4p8EuOHcjEoeuNzlE5EjuMcd9YX+zl1JzV1LTGNCj1E:kHvEzI+b1aa4p7uPjEhu3EckdSQ1JzvO
Malware Config
Signatures
Files
-
fd0a02c26c6c5a166bdbf2dac7fe5d78b6e1593cf209412daadcb431923f533f.exe windows x86
87b1042b1f6acebf0430f5fa6c90258f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetVersion
lstrlenA
AddAtomA
InterlockedExchange
GetTickCount
WaitForMultipleObjects
GetModuleHandleA
GetCommandLineA
VirtualProtect
LoadLibraryExA
SuspendThread
CloseHandle
CompareFileTime
GlobalUnlock
HeapCreate
GetProfileIntA
HeapReAlloc
WaitForSingleObject
GetSystemDefaultLangID
GetConsoleCP
user32
SubtractRect
GetKeyboardLayout
DialogBoxParamA
DestroyMenu
EnableScrollBar
CreateCaret
InsertMenuA
MessageBoxA
FindWindowA
GetMenuStringA
InvertRect
IsDialogMessage
CreateCursor
GetDlgItem
GetKeyState
DrawCaption
EqualRect
SetWindowPos
ModifyMenuA
CreateIcon
CreateMenu
CopyRect
SetPropA
CopyImage
DispatchMessageA
netapi32
DsRoleFreeMemory
DsGetDcOpenA
DsGetDcNameA
DsGetDcNextA
DsRoleCancel
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ