Static task
static1
Behavioral task
behavioral1
Sample
153607f3eb34355ca7b27c7c46e3257ee0c6c045359f30ede75244421ba78bd4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
153607f3eb34355ca7b27c7c46e3257ee0c6c045359f30ede75244421ba78bd4.exe
Resource
win10v2004-20220812-en
General
-
Target
153607f3eb34355ca7b27c7c46e3257ee0c6c045359f30ede75244421ba78bd4
-
Size
300KB
-
MD5
670f01d6b2ae4185f143c64c8c10b360
-
SHA1
72fce17c68d96495f83d46282bd95abc5b490375
-
SHA256
153607f3eb34355ca7b27c7c46e3257ee0c6c045359f30ede75244421ba78bd4
-
SHA512
ecafc39c257769d88cde6b4fac41384911ea76e441ae05bb7b13662ea6ffebe7931e27b4480e37dc562dabe60dbaf0733e844efa82229891eaaee2b33c72443b
-
SSDEEP
6144:oWnRHaTMMAHRxKmAQ+Znz74ELGGU1WNoLTJuOMNg:vtUkTi1h7DGGU1W4HMN
Malware Config
Signatures
Files
-
153607f3eb34355ca7b27c7c46e3257ee0c6c045359f30ede75244421ba78bd4.exe windows x86
336aa9ddc5b03fe3b779d94da34bf5d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetLocaleInfoA
IsValidCodePage
FindClose
GetCommandLineA
MapViewOfFile
GetExitCodeThread
FindResourceA
CreateMailslotW
SetLastError
ResetEvent
CreateDirectoryA
GetProcessHeap
GetDriveTypeW
IsBadWritePtr
HeapSize
GetFileAttributesA
GetStdHandle
CancelIo
RemoveDirectoryA
VirtualProtect
user32
PostMessageW
SetCursor
LoadImageW
GetWindowTextW
DispatchMessageA
GetCapture
PeekMessageA
wsprintfA
LoadCursorA
DestroyMenu
IsDialogMessageA
GetWindowLongW
SetFocus
ipsmsnap
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ