Static task
static1
Behavioral task
behavioral1
Sample
fa9a909d217b40615778d7c7e93737cf2b62ce8da5c9e943f8198c327d0779fb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fa9a909d217b40615778d7c7e93737cf2b62ce8da5c9e943f8198c327d0779fb.exe
Resource
win10v2004-20221111-en
General
-
Target
fa9a909d217b40615778d7c7e93737cf2b62ce8da5c9e943f8198c327d0779fb
-
Size
25KB
-
MD5
fdac33d1f468313e3166dd0255ce109e
-
SHA1
6126d89e34f9385f0705230058c1572b2c626729
-
SHA256
fa9a909d217b40615778d7c7e93737cf2b62ce8da5c9e943f8198c327d0779fb
-
SHA512
bc88850994a10d06b58cb7f1d726f69ded55413fe30c25c77876262e7c5cfa29bd41217ffc89c47a01065504791e360ab58b6409909b1fbe3fc65aacc916ee11
-
SSDEEP
384:08TisEd8iQTjTmeJCUPCK4BnLFyxE+UnEXXTip1bCEiWt8Z:tThe8RaeJSFzBCDmbvi
Malware Config
Signatures
Files
-
fa9a909d217b40615778d7c7e93737cf2b62ce8da5c9e943f8198c327d0779fb.exe windows x86
e29099abe6fe6f761a0644a57966a4a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GlobalAlloc
GetFileSize
CreateFileA
CreateProcessA
GetModuleHandleA
ReadFile
SetFileAttributesA
Sleep
GetSystemDirectoryA
GetStartupInfoA
GlobalUnlock
WinExec
CloseHandle
user32
GetWindowLongA
MoveWindow
SetWindowPos
GetSystemMetrics
GetWindowRect
MessageBoxA
IsWindowVisible
LoadIconA
SetDlgItemTextA
EndDialog
ShowWindow
GetDlgItemTextA
ScreenToClient
CallNextHookEx
GetCursorPos
DialogBoxParamA
CreateWindowExA
GetDlgItem
SendMessageA
GetDC
PostQuitMessage
CharUpperA
SetWindowsHookExA
UnhookWindowsHookEx
advapi32
RegQueryValueExA
RegOpenKeyExA
ole32
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
msvcp60
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
msvcrt
strlen
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
free
__CxxFrameHandler
sprintf
_purecall
rename
_access
fopen
fgets
fclose
memset
strcat
??2@YAPAXI@Z
__set_app_type
wininet
InternetOpenUrlA
InternetOpenA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ