Static task
static1
Behavioral task
behavioral1
Sample
31b028b9dccf9500c4ef9138aa6a8eedf4f09600cb10bb0e5356780692f540d5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
31b028b9dccf9500c4ef9138aa6a8eedf4f09600cb10bb0e5356780692f540d5.exe
Resource
win10v2004-20220812-en
General
-
Target
31b028b9dccf9500c4ef9138aa6a8eedf4f09600cb10bb0e5356780692f540d5
-
Size
305KB
-
MD5
861ee2c9dde2b7f12ee9ec65ea922c55
-
SHA1
584cd8491c6a1f2af8775d0140f90b44e38899f5
-
SHA256
31b028b9dccf9500c4ef9138aa6a8eedf4f09600cb10bb0e5356780692f540d5
-
SHA512
168affee4fbb06382d3019d8fe501406bebed679d5a9d893dcbef0eea4172c268ba7f87fb2115f8b806ace5a0dd263389f60d62ce208179342709cc30ee217cf
-
SSDEEP
6144:7nQjKWzhdAa6lXJMkCsPyvFmo2dgYMSNHdQLTquSkTAoli+nL/:DQjKqb+NCsUwddgGQLTGzoE+nL/
Malware Config
Signatures
Files
-
31b028b9dccf9500c4ef9138aa6a8eedf4f09600cb10bb0e5356780692f540d5.exe windows x86
ec792cad42baf0b001b783a1b611f018
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
ResumeThread
GetDriveTypeW
ReadFile
GetPrivateProfileStringW
GetConsoleAliasW
GetNumberFormatW
GetCurrentProcessId
FindClose
EnterCriticalSection
GetCurrentThreadId
FindAtomW
HeapCreate
TlsGetValue
GetModuleFileNameA
LocalFree
EnumCalendarInfoW
SetLastError
GetModuleHandleA
lstrlenW
user32
CallWindowProcW
GetSysColor
GetMenuInfo
SetFocus
IsWindow
GetKeyState
GetClientRect
GetKeyboardType
GetClassInfoA
DispatchMessageA
DispatchMessageA
DrawTextA
GetCursorInfo
wsnmp32
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
SnmpGetTimeout
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ