Static task
static1
Behavioral task
behavioral1
Sample
fb6050e5f20905b465551cda415ec85c3a05e807c5daa1d3e8e8f0f8906fbac6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fb6050e5f20905b465551cda415ec85c3a05e807c5daa1d3e8e8f0f8906fbac6.exe
Resource
win10v2004-20220901-en
General
-
Target
fb6050e5f20905b465551cda415ec85c3a05e807c5daa1d3e8e8f0f8906fbac6
-
Size
1.2MB
-
MD5
e83014d10acfe51921776645a3e8a508
-
SHA1
f2afd06d267c366cd7beb03679ed791708f119a0
-
SHA256
fb6050e5f20905b465551cda415ec85c3a05e807c5daa1d3e8e8f0f8906fbac6
-
SHA512
fbddd1fb3cfdcc2329634ce1d45ec069e3344597519ee7ab59c98dca50ba132d2b39268f2e5517d5c5165856eda41321f80fe2316b99d9b97033a51d224224f1
-
SSDEEP
24576:LzD20lgqBMPmX4F8Q6iZ1LfoJ1WrKzRwIXgc3:Lu0rMSK486Jq8V9
Malware Config
Signatures
Files
-
fb6050e5f20905b465551cda415ec85c3a05e807c5daa1d3e8e8f0f8906fbac6.exe windows x86
3197c3554c8555828034453a24bb6090
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuA
BlockInput
GetWindowTextA
DrawIconEx
GetFocus
IsWindow
GetDC
DrawTextW
EndDialog
CopyImage
AppendMenuW
CopyRect
AppendMenuA
LoadMenuA
DrawIcon
DialogBoxParamW
GetMenu
InsertMenuA
DialogBoxParamA
GetDlgItem
CopyRect
CopyIcon
GetDC
AlignRects
DrawTextA
GetWindowTextLengthA
DrawIcon
BlockInput
GetWindowTextA
DialogBoxParamW
CopyImage
IsMenu
GetWindowTextLengthA
CloseWindow
CalcMenuBar
IsWindow
EndDialog
AlignRects
AppendMenuA
CopyImage
BlockInput
DialogBoxParamW
GetMenu
GetWindowTextA
GetDlgItem
LoadMenuA
AppendMenuW
DrawIcon
AlignRects
CloseWindow
DrawTextA
AppendMenuA
GetMenu
IsWindow
GetWindowTextLengthA
GetDlgItem
DialogBoxParamA
LoadMenuA
CalcMenuBar
CreateIcon
GetCursor
AppendMenuW
GetCursor
LoadMenuA
IsMenu
DrawTextA
AlignRects
DrawIcon
DrawTextW
AppendMenuW
CalcMenuBar
AppendMenuA
GetWindowTextA
CopyIcon
CopyRect
GetWindowTextLengthA
advapi32
RegEnumKeyA
RegDeleteKeyW
RegCreateKeyW
RegEnumKeyW
RegEnumValueW
RegOpenKeyA
RegLoadKeyW
RegLoadKeyA
RegFlushKey
RegReplaceKeyA
RegReplaceKeyW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegCreateKeyExA
RegQueryValueA
RegQueryValueExA
RegOpenKeyW
RegGetKeySecurity
RegQueryValueExA
RegEnumValueW
RegQueryValueW
RegQueryValueExW
RegQueryValueA
RegOpenKeyW
RegOpenKeyExW
RegDeleteKeyA
RegReplaceKeyW
RegEnumValueA
RegDeleteKeyW
RegOpenKeyExA
RegCreateKeyExA
kernel32
GetComputerNameA
CopyFileA
DeleteFileW
OpenFileMappingA
GetFileTime
CopyFileW
ReadConsoleW
GetCPInfo
ReadConsoleA
CreateDirectoryA
CopyFileExW
WriteFile
FindFirstFileA
OpenFile
DeleteAtom
FindAtomA
CopyFileExA
CreateThread
GetConsoleMode
GetStdHandle
CreateDirectoryA
GetFileTime
CreateProcessA
OpenFileMappingA
FindAtomA
GetLastError
GetCPInfo
GetComputerNameA
DeleteAtom
WriteFile
ReadConsoleW
ExitThread
DeleteFileA
CopyFileW
GetFileSize
OpenFile
CreateDirectoryA
FindFirstFileA
ReadConsoleW
DeleteFileW
CopyFileExA
CopyFileExW
DeleteAtom
CopyFileA
GetCPInfo
DeleteFileA
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1.1MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 219B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ