Static task
static1
Behavioral task
behavioral1
Sample
31f16cbcacfbb8a9a5021b265735c427e1169b928244e82869b281463261e6d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31f16cbcacfbb8a9a5021b265735c427e1169b928244e82869b281463261e6d2.exe
Resource
win10v2004-20220812-en
General
-
Target
31f16cbcacfbb8a9a5021b265735c427e1169b928244e82869b281463261e6d2
-
Size
368KB
-
MD5
9cbacf1f1a5dde4491bd349387a205b9
-
SHA1
78c2f4370d99d58ae801e078a93d03d059bfe223
-
SHA256
31f16cbcacfbb8a9a5021b265735c427e1169b928244e82869b281463261e6d2
-
SHA512
a7f0b32658b5f8c7fb0e7c00879a9f3d1243e12fc49c58f7ff8c1fd50366e655cc772ddf53e0fef0dd916d477b602e097be114e19187a85a2d0ebca8c826a5fb
-
SSDEEP
6144:Uv4RMyhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:UgRMMrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
Files
-
31f16cbcacfbb8a9a5021b265735c427e1169b928244e82869b281463261e6d2.exe windows x86
788abc9f6448e4bd7e791d49530a4e10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetPrivateProfileStringW
FindClose
CreateEventW
SetLastError
GetCurrentThreadId
EnumCalendarInfoW
FindAtomW
GetCurrentProcessId
GetConsoleAliasW
HeapCreate
GetModuleHandleA
TlsGetValue
GetDriveTypeW
EnterCriticalSection
LocalFree
ReadFile
ResumeThread
GetNumberFormatW
lstrlenW
user32
GetClientRect
IsWindow
GetCursorInfo
GetClassInfoA
DispatchMessageA
CallWindowProcW
GetMenuInfo
DispatchMessageA
GetSysColor
GetKeyState
GetKeyboardType
DrawTextA
SetFocus
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ