Static task
static1
Behavioral task
behavioral1
Sample
27dd4f55e40d1c2ac5dea2582ac41afda0f759dd480edadba552cfde2e3bcba5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
27dd4f55e40d1c2ac5dea2582ac41afda0f759dd480edadba552cfde2e3bcba5.exe
Resource
win10v2004-20220812-en
General
-
Target
27dd4f55e40d1c2ac5dea2582ac41afda0f759dd480edadba552cfde2e3bcba5
-
Size
75KB
-
MD5
7201c0eb734a5907daf8807a54ddb1c0
-
SHA1
17d50e8fbc72afcc40b5b3a7b6edc4dbb060d7a0
-
SHA256
27dd4f55e40d1c2ac5dea2582ac41afda0f759dd480edadba552cfde2e3bcba5
-
SHA512
ee7db7ac3fb4f13f174258ae75537435f3db45f7a96e9bb2ef7449c5291eab92b8d4c093a72bfd87a9947961a9f051bede0b9ebe2edaa83b2ceb99e30f82ef35
-
SSDEEP
1536:x4bhckTFcaBTCHttjuvpqapzAxe5Wi9DlS2Y4KRTOuD:x4b+kTFcaBSO0Nxc9DlS7FjD
Malware Config
Signatures
Files
-
27dd4f55e40d1c2ac5dea2582ac41afda0f759dd480edadba552cfde2e3bcba5.exe windows x86
59f5cbbfe671587dbe1e7159b3c560d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
LeaveCriticalSection
GetModuleHandleA
FormatMessageW
GetLocalTime
CreateMutexW
SetFileTime
lstrcpyA
SetFileTime
lstrcatA
FindResourceA
SetFileTime
GetLastError
InitializeCriticalSection
GetModuleHandleW
HeapCreate
GetFileSize
IsBadWritePtr
SetFileAttributesW
ReadFile
GetStartupInfoW
msi
MsiAdvertiseProductA
MsiCloseHandle
MsiCloseAllHandles
MsiCreateRecord
user32
SetCursorPos
DispatchMessageA
LoadCursorW
GetWindowLongW
SetFocus
PeekMessageW
IsZoomed
GetWindowTextA
IsWindow
GetWindowRect
PostMessageW
IsDialogMessageA
wsprintfW
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE