Static task
static1
Behavioral task
behavioral1
Sample
da66428162ccabf226f6e8e06427e4338bee50c6d30d2d92c325c29b4eb96279.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
da66428162ccabf226f6e8e06427e4338bee50c6d30d2d92c325c29b4eb96279.exe
Resource
win10v2004-20220812-en
General
-
Target
da66428162ccabf226f6e8e06427e4338bee50c6d30d2d92c325c29b4eb96279
-
Size
300KB
-
MD5
6ced75876795201a88076197168d33f2
-
SHA1
ea8023e5d46b3263068dda3ffca6d3a074e10c77
-
SHA256
da66428162ccabf226f6e8e06427e4338bee50c6d30d2d92c325c29b4eb96279
-
SHA512
e26ff09d641f8f0ea8b0e59175c22fe7b54d7df9979a0d1cf39792ddcff6997480f0fcfdcbb5667e12fb62158d25cb3b8acf15dc20261baf84ee4008e98a6fed
-
SSDEEP
6144:4y3Wn4yJ7BfqxwNfQDIgZjuXb5y1h3CBp6jfnIT+AW+QwbzIS+bMQ:m4G15fQDIgFf1hb/IT+AW+JzcM
Malware Config
Signatures
Files
-
da66428162ccabf226f6e8e06427e4338bee50c6d30d2d92c325c29b4eb96279.exe windows x86
44a331787427daa4021006a4e7c7de65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
GetFileAttributesA
GetTickCount
MapViewOfFile
GetProcessHeap
HeapSize
GetExitCodeThread
GetLocaleInfoA
GetModuleHandleA
IsValidCodePage
GetDriveTypeW
FindClose
VirtualProtect
CreateMailslotW
CreateDirectoryA
SetLastError
ResetEvent
CancelIo
RemoveDirectoryA
GetFileAttributesA
IsBadWritePtr
user32
SetCursor
LoadCursorA
DispatchMessageA
PeekMessageA
wsprintfW
LoadImageW
PostMessageW
GetWindowLongW
IsWindow
IsDialogMessageA
SetFocus
GetCapture
GetWindowTextW
ipsmsnap
DllUnregisterServer
DllGetClassObject
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE