Static task
static1
Behavioral task
behavioral1
Sample
06fb7305de1e8f49865ccf04d87b0f87dde6586ffa3d9b1de3198a05299e4a70.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06fb7305de1e8f49865ccf04d87b0f87dde6586ffa3d9b1de3198a05299e4a70.exe
Resource
win10v2004-20220812-en
General
-
Target
06fb7305de1e8f49865ccf04d87b0f87dde6586ffa3d9b1de3198a05299e4a70
-
Size
300KB
-
MD5
7368b62ec8b05c06100ac8139d6759e0
-
SHA1
daf3f5bd88e5884fa14aa807dccc3e383e1daf1c
-
SHA256
06fb7305de1e8f49865ccf04d87b0f87dde6586ffa3d9b1de3198a05299e4a70
-
SHA512
9ceafcd69cadae4bc343da211a3f63353fda297c4b4491b11a97432df26539fd3e3a4abdddd7f5b2e0de31813c475a9693f77d7c8cbb24ccca4ffb374f869c35
-
SSDEEP
6144:4Wnb3uPBVg4pnTdZP3I/BS3lB9bTGoCMjr75ExqOZC:/b3iNTdZP3IZS3l3vjX5Exh
Malware Config
Signatures
Files
-
06fb7305de1e8f49865ccf04d87b0f87dde6586ffa3d9b1de3198a05299e4a70.exe windows x86
89e8dbaf4fcd0d840ba8268b5d167393
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoA
GetDriveTypeW
IsBadWritePtr
ResetEvent
GetFileAttributesA
FindClose
GetProcessHeap
GetModuleHandleA
RemoveDirectoryA
CancelIo
CreateMailslotW
HeapSize
MapViewOfFile
FindResourceA
ReleaseMutex
GetStdHandle
GetCommandLineA
GetExitCodeThread
CreateDirectoryA
SetLastError
VirtualProtect
user32
IsDialogMessageA
SetCursor
GetCapture
PostMessageW
PeekMessageA
LoadImageW
wsprintfA
DestroyMenu
GetWindowLongW
SetFocus
GetWindowTextW
LoadCursorA
DispatchMessageA
ipsmsnap
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ