Static task
static1
Behavioral task
behavioral1
Sample
FlashStep.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
FlashStep.exe
Resource
win10v2004-20221111-en
General
-
Target
FlashStep.exe
-
Size
524KB
-
MD5
85ac8b50dbdd99f252f233741c9420e3
-
SHA1
75fbbb883a738fb7af5d6cb7c4c5742b76789f91
-
SHA256
e8ea3c1ed98bd272ffec214c19228a9395c9e128f69582a0aa0b79599b243d7e
-
SHA512
8238210382e2954bcf6663755f99b16e1ef68644aa6fc6679c960b923b8642d56f78262a97834d4e4beb9d03449b1d6532031df597a6b0ef76dd22f46742f7da
-
SSDEEP
12288:VPduQGp9FT5se/OUfc3kU+abFCkGe7/8qKdByCrG0qd:JcQCoe/mpb0kGez8fyCrG0
Malware Config
Signatures
Files
-
FlashStep.exe.exe windows x64
e0bb798843321269d19f83440476c11a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
WSACleanup
winmm
mixerOpen
version
VerQueryValueW
comctl32
ord17
psapi
GetModuleBaseNameW
user32
GetDC
gdi32
BitBlt
comdlg32
GetOpenFileNameW
advapi32
RegCloseKey
shell32
DragFinish
ole32
CoGetObject
oleaut32
SafeArrayGetDim
Sections
.MPRESS1 Size: 406KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE