Static task
static1
Behavioral task
behavioral1
Sample
0e609f53be4f81303cf4a938db9569ee90df4b42fede295cc927d2cad1d902f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e609f53be4f81303cf4a938db9569ee90df4b42fede295cc927d2cad1d902f6.exe
Resource
win10v2004-20220812-en
General
-
Target
0e609f53be4f81303cf4a938db9569ee90df4b42fede295cc927d2cad1d902f6
-
Size
322KB
-
MD5
43f1fdccdc1b2b5c540a6039580443b6
-
SHA1
d7890ab302875be60fb7d351003908195452b34f
-
SHA256
0e609f53be4f81303cf4a938db9569ee90df4b42fede295cc927d2cad1d902f6
-
SHA512
4f291e5b80764bf1baa7d95d738afdb4fea694b2b8b40347e3dd9f2231b0e7313e0289f0d0470d3db01eb06e26f5ef72d988a82c3bb701fbedcceb3f20bf849e
-
SSDEEP
6144:MLwKcTrhyvp3JWhxI99VYowRihtv0BXr+ZqvC3SdHSOCZQ:/sd4ipwwtv8Xr+Z1KSOCZQ
Malware Config
Signatures
Files
-
0e609f53be4f81303cf4a938db9569ee90df4b42fede295cc927d2cad1d902f6.exe windows x86
f1d0fd92d093f99e370412beaed8986a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetComputerNameA
SetEvent
lstrcmpiA
HeapDestroy
Sleep
SearchPathA
ExitProcess
ResumeThread
GetStartupInfoA
AddAtomA
GetDiskFreeSpaceA
DeleteCriticalSection
CloseHandle
PulseEvent
VirtualProtect
ReleaseMutex
TlsGetValue
GetLastError
GetModuleHandleA
user32
CloseWindow
GetKeyState
CreateWindowExA
DispatchMessageA
GetMessageA
GetScrollBarInfo
CopyImage
DragDetect
EnableWindow
EndDialog
CreateMenu
CopyIcon
IsIconic
DialogBoxParamA
hlink
HlinkIsShortcut
HlinkResolveShortcut
HlinkNavigate
HlinkTranslateURL
HlinkClone
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ