Static task
static1
Behavioral task
behavioral1
Sample
f2a9c41965dbce706786f1b74b4539be59519f71ff78664e9b3d26d355e0c8b2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2a9c41965dbce706786f1b74b4539be59519f71ff78664e9b3d26d355e0c8b2.exe
Resource
win10v2004-20220901-en
General
-
Target
f2a9c41965dbce706786f1b74b4539be59519f71ff78664e9b3d26d355e0c8b2
-
Size
311KB
-
MD5
72bb79d058b7e24603243023f275f230
-
SHA1
751487500801c646fde28ef0b74c1da6341ad517
-
SHA256
f2a9c41965dbce706786f1b74b4539be59519f71ff78664e9b3d26d355e0c8b2
-
SHA512
685c53d5db2d4ed3e43931d03505505d017fd735f48f05dee6bcc719e48f796fa7ad93c4115831d95fd55962775ec55fe1cfabbd714fb7f40f000907cb133db1
-
SSDEEP
6144:mlk8XHaUZ3etw/Ym2sSlh8bygcdjIwHZqlMb7sb/aksOcqjPXnOPLW0JD:mzRAtEYOSla+g6r0TQqjPXnYfD
Malware Config
Signatures
Files
-
f2a9c41965dbce706786f1b74b4539be59519f71ff78664e9b3d26d355e0c8b2.exe windows x86
634eed029ddf90f4c03fd7764665e32e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
SetFileTime
GetFileSize
lstrcpyA
SetFileTime
CreateMutexW
ReadFile
IsBadWritePtr
FormatMessageW
GetStartupInfoW
GetLastError
HeapCreate
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
GetLocalTime
GetModuleHandleA
SetFileTime
SetFileAttributesW
GetModuleHandleW
lstrcatA
msi
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
user32
PeekMessageW
PostMessageW
SetFocus
IsZoomed
IsDialogMessageA
IsWindow
LoadCursorW
GetWindowTextA
wsprintfW
GetWindowRect
SetCursorPos
GetWindowLongW
DispatchMessageA
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE