Static task
static1
Behavioral task
behavioral1
Sample
42cea40df1556263809b82b94524b49708c00bbb87c0a901afbe7b1daa9d2597.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42cea40df1556263809b82b94524b49708c00bbb87c0a901afbe7b1daa9d2597.exe
Resource
win10v2004-20220901-en
General
-
Target
42cea40df1556263809b82b94524b49708c00bbb87c0a901afbe7b1daa9d2597
-
Size
368KB
-
MD5
88371927cd315a3166aed1090998d73e
-
SHA1
91f22b5294e05ef404336af0337a036379bc53df
-
SHA256
42cea40df1556263809b82b94524b49708c00bbb87c0a901afbe7b1daa9d2597
-
SHA512
ad598fbd1c6480f38fd74c5bfb12b91041f4d60618db557bd90536511ee780649d59e63139da6c6ecbd5818fa6579dc22b10076be26a7186d5d5b0ebebe7fdfc
-
SSDEEP
6144:FutLkRMlhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:Fu9kRM7rpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
Files
-
42cea40df1556263809b82b94524b49708c00bbb87c0a901afbe7b1daa9d2597.exe windows x86
e92bb2319fac6b30b69cef2625bc67e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
ResumeThread
lstrlenW
SetLastError
GetModuleHandleA
FindAtomW
GetCurrentProcessId
LocalFree
FindClose
GetNumberFormatW
SetEvent
CreateEventW
EnterCriticalSection
HeapCreate
GetConsoleAliasW
TlsGetValue
GetCurrentThreadId
GetDriveTypeW
ReadFile
EnumCalendarInfoW
user32
GetMenuInfo
DrawTextA
IsWindow
GetClassInfoA
GetSysColor
GetKeyboardType
GetClientRect
CallWindowProcW
SetFocus
DispatchMessageA
DispatchMessageA
GetKeyState
GetCursorInfo
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ