Static task
static1
Behavioral task
behavioral1
Sample
fde6e19ff13c8d175a9ba409bbf3e5b0daa93e636a30b26f1b91e6d466e72bdf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fde6e19ff13c8d175a9ba409bbf3e5b0daa93e636a30b26f1b91e6d466e72bdf.exe
Resource
win10v2004-20221111-en
General
-
Target
fde6e19ff13c8d175a9ba409bbf3e5b0daa93e636a30b26f1b91e6d466e72bdf
-
Size
312KB
-
MD5
4dab1d0a873889649d326caaf7a769dd
-
SHA1
7c88b1fddb1b29836b3b255ffa01fce901cd4f55
-
SHA256
fde6e19ff13c8d175a9ba409bbf3e5b0daa93e636a30b26f1b91e6d466e72bdf
-
SHA512
291537a6ae4d8a739cbad135f6a17c51e8cd87b473e6dc58cdaaf03e1d4d31dc823ac5b09ccfe5265322a3870656883f7d38569be7ee65ab9cd04c38dbf24362
-
SSDEEP
6144:g4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:g4tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
fde6e19ff13c8d175a9ba409bbf3e5b0daa93e636a30b26f1b91e6d466e72bdf.exe windows x86
374de482cdab3072d59a0a68b7b01a2e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCompressedFileSizeA
GetCurrentProcessId
HeapCreate
GetCurrentThread
GetCurrentProcess
GetStdHandle
GetSystemDirectoryA
SetEvent
GetLocaleInfoA
GetCommandLineA
OpenSemaphoreA
GetACP
GlobalFree
WriteConsoleA
VirtualProtect
InterlockedExchange
FlushFileBuffers
IsDebuggerPresent
FreeEnvironmentStringsA
RaiseException
user32
EndPaint
GetWindow
ShowWindow
ReleaseDC
FrameRect
GetFocus
BeginPaint
GetClassNameA
wsprintfA
IsIconic
SetActiveWindow
GetCursorPos
GetParent
SetForegroundWindow
GetDlgItem
ValidateRgn
DrawTextA
GetWindowTextLengthA
FillRect
linkinfo
ResolveLinkInfoA
DestroyLinkInfo
IsValidLinkInfo
GetCanonicalPathInfoA
GetLinkInfoData
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ