Static task
static1
Behavioral task
behavioral1
Sample
fcc18d959685132c282b16788beeea68ab7177b9802665fcdccb059bf77960c6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fcc18d959685132c282b16788beeea68ab7177b9802665fcdccb059bf77960c6.exe
Resource
win10v2004-20230220-en
General
-
Target
fcc18d959685132c282b16788beeea68ab7177b9802665fcdccb059bf77960c6
-
Size
1.3MB
-
MD5
96109fda60af87231dbe48998d5eddca
-
SHA1
8f231399eb3050124b4cefb0a82a15e2e32156fa
-
SHA256
fcc18d959685132c282b16788beeea68ab7177b9802665fcdccb059bf77960c6
-
SHA512
43a7ca20d34d3bbff53d4a1ce01b9f6cab85928a73d376e87ab455a5dd9c3f756f714c0e6629e7405f491721a774fef93be7f8d8fc2776975c589f30a2cb61a7
-
SSDEEP
24576:qEs5bp6IX4Qrzkr+1DvazEOSPBGpeN/ndAJDYOYp95sRyHTUyvYHdIK08hx4:9SbgIX4ihEEOQBGsNlAJDYOYL5sR+Qxo
Malware Config
Signatures
Files
-
fcc18d959685132c282b16788beeea68ab7177b9802665fcdccb059bf77960c6.exe windows x86
b4ffd064eebd4a4526ed17d48ecee035
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
LBItemFromPt
shell32
Shell_NotifyIconA
comdlg32
ChooseColorA
wsock32
WSACleanup
ntdll
RtlIpv6AddressToStringA
winmm
waveOutWrite
iphlpapi
GetAdaptersInfo
Sections
CODE Size: 1.0MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE