Static task
static1
Behavioral task
behavioral1
Sample
c52fa26a7bd79fbe0574846cf5eafec2e5a339059de3d8d1130a28696a6bc9e2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c52fa26a7bd79fbe0574846cf5eafec2e5a339059de3d8d1130a28696a6bc9e2.exe
Resource
win10v2004-20220901-en
General
-
Target
c52fa26a7bd79fbe0574846cf5eafec2e5a339059de3d8d1130a28696a6bc9e2
-
Size
300KB
-
MD5
6149a62a26c216cbd19a17a613edc3a1
-
SHA1
11b59e5293c85eb41eb13c551cc55a9c683ed78f
-
SHA256
c52fa26a7bd79fbe0574846cf5eafec2e5a339059de3d8d1130a28696a6bc9e2
-
SHA512
dd30c3b400468971a767814f4014622d3b649e3e8778f683556b4344b939deda186e22cda755e07d073a1fad952ca5a5ef6b00a29a11e1c42224af6b5cf7c946
-
SSDEEP
6144:5Za31UKd15xA7+lsOjKrKIqtdDQD/Pt0NRfmowoV7gWcRoM:52dd15xflsOjKrKFt1aOvfmKTqR
Malware Config
Signatures
Files
-
c52fa26a7bd79fbe0574846cf5eafec2e5a339059de3d8d1130a28696a6bc9e2.exe windows x86
ee7550dbf0de786aba7689c9529d1aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteFileA
ResetEvent
HeapSize
ReadConsoleW
GetFileAttributesA
ReleaseMutex
GetProcessHeap
GetStdHandle
RemoveDirectoryA
CreateDirectoryA
GetDriveTypeA
GetLocaleInfoA
SetLastError
IsBadWritePtr
CreatePipe
VirtualProtect
WriteFile
SetLocalTime
GetPriorityClass
GetCommandLineA
GetModuleHandleA
user32
SetFocus
SetCursor
GetCapture
PeekMessageA
DestroyMenu
PostMessageA
DispatchMessageA
GetWindowTextW
DrawIcon
GetWindowLongW
wsprintfA
LoadCursorA
GetCaretPos
els
DllRegisterServer
DllGetClassObject
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ