Static task
static1
Behavioral task
behavioral1
Sample
25b18991d4afbf3c7cea42bdd57454245398c6af6fa9aa830d146fd00df6dedd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25b18991d4afbf3c7cea42bdd57454245398c6af6fa9aa830d146fd00df6dedd.exe
Resource
win10v2004-20220901-en
General
-
Target
25b18991d4afbf3c7cea42bdd57454245398c6af6fa9aa830d146fd00df6dedd
-
Size
171KB
-
MD5
a9d3744b045d9f2839274d3e03f0be5c
-
SHA1
9eda30a1241a99a58f40f466fc021bd2ba9d0c1f
-
SHA256
25b18991d4afbf3c7cea42bdd57454245398c6af6fa9aa830d146fd00df6dedd
-
SHA512
cca65ebedbd897f533e8d2a989561de652cee31b0fafa7337b8bf76ea97dba5586df9aaa54b83a2c5a5843fdee976942a32b8af78cea7b1399f2c0a1b431c7bf
-
SSDEEP
3072:rW5dokhxd+MKNWtWzB9y2asTPtPuMAsQCK0Ky9hOobGElEx+THq:rWsknd0QWzHy502wQhy9BvHq
Malware Config
Signatures
Files
-
25b18991d4afbf3c7cea42bdd57454245398c6af6fa9aa830d146fd00df6dedd.exe windows x86
7879fc98b9b3e34dfa0e6b122040dd79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetExitCodeProcess
GetCommandLineA
CloseHandle
GetTickCount
SearchPathA
SetLastError
FindClose
CreateMutexA
GetLastError
Sleep
GetModuleHandleA
VirtualProtect
GetComputerNameA
GetDriveTypeA
GetVolumeInformationA
ReleaseMutex
FreeConsole
TlsGetValue
EnumResourceTypesA
shell32
DragAcceptFiles
ShellMessageBoxA
SheChangeDirA
ShellAboutA
DragQueryPoint
SHGetNewLinkInfo
DragFinish
DragQueryFileA
SHGetDiskFreeSpaceA
SHFree
SHGetSettings
SHAlloc
SHGetMalloc
StrChrA
dmutil
DisplayError
ShowMessage
TranslateError
SzwFromSza
SzwDupSzw
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ