Static task
static1
Behavioral task
behavioral1
Sample
1c5a250725a4b1126e732f0ded6c986dcc47d5796744fd6a9dbd5c178db94608.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1c5a250725a4b1126e732f0ded6c986dcc47d5796744fd6a9dbd5c178db94608.exe
Resource
win10v2004-20220812-en
General
-
Target
1c5a250725a4b1126e732f0ded6c986dcc47d5796744fd6a9dbd5c178db94608
-
Size
74KB
-
MD5
6f041598e735f76fb23eeff865f83290
-
SHA1
689ffc934e59351e6be3e217c8976ece3210c738
-
SHA256
1c5a250725a4b1126e732f0ded6c986dcc47d5796744fd6a9dbd5c178db94608
-
SHA512
676190d7aecfaeedec8031c2ce9f42ef501b5883706dc2bf04616ed298e16f7f1e3cd70f1328bd67d318fd2914d28ae01bee1d208dd678d928cff9cd4bafd071
-
SSDEEP
1536:RhlIY7C0++JLzPL+a1BtNUFLBEhM1uly89tP:RrIY7C0+qzP/TNUFVmbP
Malware Config
Signatures
Files
-
1c5a250725a4b1126e732f0ded6c986dcc47d5796744fd6a9dbd5c178db94608.exe windows x86
defcbe785c5edbb1dbb034fc3824776e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
DeleteFileA
SetLastError
GetModuleHandleA
GetFileAttributesA
CancelIo
CreateDirectoryA
HeapSize
GetDriveTypeW
ReleaseMutex
GetLocaleInfoA
GetProcessHeap
MapViewOfFile
GetCommandLineA
RemoveDirectoryA
SetLocalTime
WriteFile
VirtualProtect
ResetEvent
GetStdHandle
CreateMailslotA
user32
GetWindowLongW
wsprintfA
PostMessageW
LoadCursorA
PeekMessageA
SetFocus
GetCaretPos
DispatchMessageA
DestroyMenu
GetCapture
GetWindowTextW
SetCursor
LoadImageA
filemgmt
DllRegisterServer
DllGetClassObject
DllUnregisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ