Static task
static1
Behavioral task
behavioral1
Sample
306bce8b18f46e5dac0ee2f5d38f1e51d25066bf0b6e77a97f733194e7152327.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
306bce8b18f46e5dac0ee2f5d38f1e51d25066bf0b6e77a97f733194e7152327.exe
Resource
win10v2004-20220901-en
General
-
Target
306bce8b18f46e5dac0ee2f5d38f1e51d25066bf0b6e77a97f733194e7152327
-
Size
130KB
-
MD5
6ac997250cb68e664a4c66c5c9a7437b
-
SHA1
5135dfb1c422d6829847f83cf1bfcda95b8fd1e8
-
SHA256
306bce8b18f46e5dac0ee2f5d38f1e51d25066bf0b6e77a97f733194e7152327
-
SHA512
6aaa867fa43c31046fc0667fbda30836a22d1f15830c2c7d18accb73b23dfa4da937e666ed08e717601d2ba40ec945223751029ee13397f31108f9c533b70e74
-
SSDEEP
3072:pg/hwokb84hFwpdLCqVAQ+H5mWSAsumQrb:nXY+apQquNZmWSxhQrb
Malware Config
Signatures
Files
-
306bce8b18f46e5dac0ee2f5d38f1e51d25066bf0b6e77a97f733194e7152327.exe windows x86
6c09f2ff42f8bd24eb4fe75e62cd7bba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LocalFlags
GetCurrentProcess
GetFileAttributesW
GlobalLock
HeapFree
DeviceIoControl
GetVersionExA
GetCurrentThread
GetModuleHandleA
SetCommBreak
CreateDirectoryW
GetStringTypeA
GetFileAttributesW
VirtualProtectEx
CreateEventA
GetPrivateProfileSectionA
FindClose
RemoveDirectoryW
SetLastError
GetPrivateProfileIntA
CloseHandle
user32
SetFocus
InsertMenuA
PeekMessageW
PostMessageW
GetWindowTextW
GetWindowLongW
wsprintfW
IsZoomed
IsWindow
LoadCursorW
DispatchMessageA
SetCursorPos
IsDialogMessageA
netshell
DllCanUnloadNow
HrCreateDesktopIcon
DllRegisterServer
DllGetClassObject
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ