Static task
static1
Behavioral task
behavioral1
Sample
788b2d16f98dfe7f4b3c799227af8d7eccd096f7fc092bad981c8e2207a49db7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
788b2d16f98dfe7f4b3c799227af8d7eccd096f7fc092bad981c8e2207a49db7.exe
Resource
win10v2004-20220901-en
General
-
Target
788b2d16f98dfe7f4b3c799227af8d7eccd096f7fc092bad981c8e2207a49db7
-
Size
301KB
-
MD5
73f555c6aba57c55c02acf73e97d66e7
-
SHA1
e6bfaff2fc5e0130c98ef020d3caed4ec5c278e2
-
SHA256
788b2d16f98dfe7f4b3c799227af8d7eccd096f7fc092bad981c8e2207a49db7
-
SHA512
2baba2c71b81051696abe57284e3debd13ed1a3c379d7d7add563ee1145bb2bb24c33e18e08942df01d1b5f82f7e14da5826dd26b2bfb3fd905694e5d1b7deb1
-
SSDEEP
3072:9zOsrm94n1nP/cEKtuOzCUOJ+SkKv9wD5BVp1r6bbI9M8m27I4DK0yb:9z71ncTFU+SOTVr6bbI9M927Xt2
Malware Config
Signatures
Files
-
788b2d16f98dfe7f4b3c799227af8d7eccd096f7fc092bad981c8e2207a49db7.exe windows x86
ff69635b3ef0c08a63856a6aed197a39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
DeleteFileA
ReleaseMutex
GetModuleHandleA
GetStdHandle
VirtualProtect
RemoveDirectoryA
GetCommandLineA
WriteFile
ResetEvent
SetLastError
GetLocaleInfoA
CreateMailslotA
GetFileAttributesA
SetLocalTime
GetProcessHeap
IsBadWritePtr
ReadConsoleW
HeapSize
CancelIo
CreateDirectoryA
user32
SetCursor
LoadCursorA
GetWindowLongW
PostMessageW
wsprintfA
GetWindowTextW
DispatchMessageA
SetFocus
PeekMessageA
DrawIcon
DestroyMenu
GetCaretPos
GetCapture
filemgmt
DllUnregisterServer
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ