Static task
static1
Behavioral task
behavioral1
Sample
f482b1462ed80e34a03e88cab2a55f21d70adea5a669c4155e73a9c6c24e0f74.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f482b1462ed80e34a03e88cab2a55f21d70adea5a669c4155e73a9c6c24e0f74.exe
Resource
win10v2004-20220901-en
General
-
Target
f482b1462ed80e34a03e88cab2a55f21d70adea5a669c4155e73a9c6c24e0f74
-
Size
412KB
-
MD5
6fe5286a0664a26bd03ecc9dda5e171d
-
SHA1
4f518a828a4c716601eaca191b8de1c724779252
-
SHA256
f482b1462ed80e34a03e88cab2a55f21d70adea5a669c4155e73a9c6c24e0f74
-
SHA512
f4743d533df22ce11f2ce275a8266d3894ef4f7c9b204e96c8d0800d09e6b3628c84b18a4b1afedc56eb5a7d37ae02dbe33b78a9978d83566f66dc3ded63d3b5
-
SSDEEP
12288:I4ZkBUN6/T0M9HmwWhmpR7Y12SmUcuvFrCj:i/JWhyx8
Malware Config
Signatures
Files
-
f482b1462ed80e34a03e88cab2a55f21d70adea5a669c4155e73a9c6c24e0f74.exe windows x86
202c57d116feccbdc1cd40a26b975f19
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
CreateMailslotW
MapViewOfFile
GetLocaleInfoA
SetLastError
GetExitCodeThread
RemoveDirectoryA
FindClose
FindResourceA
ResetEvent
HeapSize
CancelIo
GetStdHandle
GetCommandLineA
IsBadWritePtr
GetDriveTypeW
CreateDirectoryA
GetFileAttributesA
IsValidCodePage
GetProcessHeap
user32
wsprintfA
IsDialogMessageA
SetFocus
DestroyMenu
DispatchMessageA
GetCapture
LoadCursorA
LoadImageW
PeekMessageA
GetWindowLongW
GetWindowTextW
SetCursor
PostMessageW
ipsmsnap
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ