Static task
static1
Behavioral task
behavioral1
Sample
57de46d20c21cddb097f4209afc52aa345996d093d2fcec17bf28f4f19955df6.exe
Resource
win7-20220812-en
General
-
Target
57de46d20c21cddb097f4209afc52aa345996d093d2fcec17bf28f4f19955df6
-
Size
224KB
-
MD5
6fb1bb526be1f0eb5346e7eef98e3a70
-
SHA1
f476f533eebb60abedf5cf210f957ceeca19bc9e
-
SHA256
57de46d20c21cddb097f4209afc52aa345996d093d2fcec17bf28f4f19955df6
-
SHA512
f691200cf8f3795463459b7cd522c750008c0bae82eacff2cfd3891c7a95458ef6b3339c2a86f7f504a4e793292f9aea631e29521c78e1e76ba1c4072c860bbd
-
SSDEEP
3072:0zOxncrgPiDLlU89Giw9WwLMK0hG3qaeeZpFJ+/qtg6mZq25Z+0G/exg6INNevuN:pCpU8GihGPemW/ig60gq+NeQ/qT6tPB
Malware Config
Signatures
Files
-
57de46d20c21cddb097f4209afc52aa345996d093d2fcec17bf28f4f19955df6.exe windows x86
a1d1cbacae79b293e8378cf9ae2706a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PrepareTape
LoadModule
FindFirstFileW
GetCompressedFileSizeW
ExpandEnvironmentStringsW
GetFileInformationByHandle
GetShortPathNameA
ConnectNamedPipe
GetNumberFormatW
QueueUserWorkItem
CreateDirectoryExA
QueueUserAPC
GetSystemDefaultUILanguage
GetTempFileNameA
GetQueuedCompletionStatus
GlobalUnWire
LocalShrink
FindFirstFileA
GetDiskFreeSpaceExA
SetCurrentDirectoryA
GetComputerNameExW
CreateEventW
GetDevicePowerState
GetLongPathNameW
CreateWaitableTimerW
GetSystemPowerStatus
RequestDeviceWakeup
lstrcatW
CompareStringA
SetProcessAffinityMask
CloseHandle
version
VerFindFileW
VerFindFileA
VerInstallFileA
user32
InvalidateRect
LookupIconIdFromDirectory
DdeQueryStringA
GetKeyboardLayoutNameW
SendIMEMessageExA
CharToOemW
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 375B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 381B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE