Static task
static1
Behavioral task
behavioral1
Sample
197375461efd41a9d43da81fd4dda0ee4dd152cce494de3129f8ac9b4516fe56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
197375461efd41a9d43da81fd4dda0ee4dd152cce494de3129f8ac9b4516fe56.exe
Resource
win10v2004-20220812-en
General
-
Target
197375461efd41a9d43da81fd4dda0ee4dd152cce494de3129f8ac9b4516fe56
-
Size
130KB
-
MD5
74fe16226dc27ed9eb045e062090c1a0
-
SHA1
56499df49d07e1ac46cc9d0fa010a4a9ee6c33a6
-
SHA256
197375461efd41a9d43da81fd4dda0ee4dd152cce494de3129f8ac9b4516fe56
-
SHA512
be3d2c87b59a9d45a95d6b0782cd16fb9b022a8c78808253c51a881ef540d761415e29c962c153ef792ec9b69b053c6ba8bc62899f6b4ce49c957b4680c9b946
-
SSDEEP
3072:OadJjh4w4/Duo7kUavF2Rb+VLDyJ0sHwyRkq:DHh4//KKIUO0p
Malware Config
Signatures
Files
-
197375461efd41a9d43da81fd4dda0ee4dd152cce494de3129f8ac9b4516fe56.exe windows x86
4bfd9779e0e66a9dcee731742d0039ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryW
GlobalLock
GetPrivateProfileIntA
CloseHandle
SetLastError
GetFileAttributesW
GetVersionExA
GetStringTypeA
HeapFree
LocalFlags
CreateDirectoryW
GetModuleHandleA
GetCurrentThread
VirtualProtectEx
GetPrivateProfileSectionA
FindClose
CreateEventA
GetCurrentProcess
GetFileAttributesW
DeviceIoControl
GetStdHandle
user32
wsprintfW
DispatchMessageA
GetWindowLongW
InsertMenuW
SetCursorPos
IsWindow
IsZoomed
PeekMessageW
LoadCursorW
PostMessageW
IsDialogMessageA
GetWindowTextW
SetFocus
ntmarta
AccConvertAclToAccess
AccFreeIndexArray
AccConvertSDToAccess
AccGetExplicitEntries
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ