Static task
static1
Behavioral task
behavioral1
Sample
0fea3858b757d17aa25497207b6ca9f78231943c5529a9303d6aaaa08d163343.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0fea3858b757d17aa25497207b6ca9f78231943c5529a9303d6aaaa08d163343.exe
Resource
win10v2004-20220812-en
General
-
Target
0fea3858b757d17aa25497207b6ca9f78231943c5529a9303d6aaaa08d163343
-
Size
408KB
-
MD5
76541908eaba58a21d8c9c334c0b2500
-
SHA1
4b2556dd9accb1f64a26aafb5f09745b454ab0f6
-
SHA256
0fea3858b757d17aa25497207b6ca9f78231943c5529a9303d6aaaa08d163343
-
SHA512
aecbf5369d69b5fc5b48a56ed2ba11a5cbbdccc9576877deb8d373235fef738f5552eaffaf64582da41da203df339ae0e20359d03e9deeabadb73db4d838942a
-
SSDEEP
6144:HbaSdGQxGOENlsV+WSRtTMh3LN0sC2alTjCO+9kjJJJjHfWvAliFJmh:H1xesV4to1N0s8k9UL1fWjCh
Malware Config
Signatures
Files
-
0fea3858b757d17aa25497207b6ca9f78231943c5529a9303d6aaaa08d163343.exe windows x86
91863cca220724195cfe8ee661d75e06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
RemoveDirectoryW
GetFileAttributesW
FindClose
LocalFlags
CreateEventA
GetCurrentThread
GetPrivateProfileIntA
SetCommBreak
GetCurrentProcess
SetLastError
HeapFree
GetModuleHandleA
GlobalLock
GetFileAttributesW
GetPrivateProfileSectionA
DeviceIoControl
GetVersionExA
GetStringTypeA
CreateDirectoryW
VirtualProtectEx
user32
SetCursorPos
PeekMessageW
GrayStringW
GetWindowTextW
IsWindow
DispatchMessageA
LoadCursorW
SetFocus
GetWindowLongW
IsDialogMessageA
IsZoomed
PostMessageW
wsprintfW
netshell
DllRegisterServer
DllCanUnloadNow
HrCreateDesktopIcon
DllGetClassObject
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ