Static task
static1
Behavioral task
behavioral1
Sample
19d7619dfb1406fa8c26a8dce4a72bafcfa1706323c1b6b6adad9f0e0f4599b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19d7619dfb1406fa8c26a8dce4a72bafcfa1706323c1b6b6adad9f0e0f4599b9.exe
Resource
win10v2004-20220812-en
General
-
Target
19d7619dfb1406fa8c26a8dce4a72bafcfa1706323c1b6b6adad9f0e0f4599b9
-
Size
368KB
-
MD5
18a9b24a5cd67fd925b9a188fc24ee62
-
SHA1
6c5080aa4adacb93fdb74426ab294a28ab06e3f8
-
SHA256
19d7619dfb1406fa8c26a8dce4a72bafcfa1706323c1b6b6adad9f0e0f4599b9
-
SHA512
3c30ac190ebcf5afee2760f1346e5b779f704dfb6353cf641cd9c970eaca77bd1efeb3dfa4de1e3e680412e440bbf53521ddbb80d2fa06dc43b1fc4b5baba364
-
SSDEEP
6144:Jtkxk0UsxnVs3zjKFYUKGYyrBKcHnjYfIHTn1rrQzWmtXhzpJP/yDfMvCecDjd7a:PkxNZ6GMWTHnnzn1rrQ5tTIJp7mf
Malware Config
Signatures
Files
-
19d7619dfb1406fa8c26a8dce4a72bafcfa1706323c1b6b6adad9f0e0f4599b9.exe windows x86
dc2b9c48c6eba96b2e0a3b286e101755
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
GetEnvironmentVariableA
WriteFile
FindVolumeClose
InterlockedExchange
GetModuleHandleW
ResetEvent
CreateThread
GetMailslotInfo
GetACP
lstrlenA
LocalFree
GetExitCodeProcess
GetPrivateProfileIntW
GlobalFree
CloseHandle
ResumeThread
VirtualAlloc
GetDriveTypeW
FreeConsole
user32
EndDialog
DispatchMessageA
GetSysColor
CallWindowProcW
IsWindow
GetClassInfoA
GetKeyboardType
GetSysColor
SetFocus
DrawStateW
GetClientRect
CreateWindowExA
GetCursorInfo
qedit
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ