Static task
static1
Behavioral task
behavioral1
Sample
0dfb7dc0c9ec1a9b11fecdef93a03b960015feab0db11f90c28a34f31e3b95de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0dfb7dc0c9ec1a9b11fecdef93a03b960015feab0db11f90c28a34f31e3b95de.exe
Resource
win10v2004-20220901-en
General
-
Target
0dfb7dc0c9ec1a9b11fecdef93a03b960015feab0db11f90c28a34f31e3b95de
-
Size
301KB
-
MD5
7d3520945e0845f630ac08432dd419e3
-
SHA1
2050b289f732eb2f5c60b9bbf20918bd7160781e
-
SHA256
0dfb7dc0c9ec1a9b11fecdef93a03b960015feab0db11f90c28a34f31e3b95de
-
SHA512
0fed37c9f1a01d8692167209c81dbc7616d55745dac4de95a519d07a6040c03cec0601959bb81b419ff53cd9a905c32dd451cf8574b6f5022b02771551448645
-
SSDEEP
6144:7WnW6b+y+XyEFd0zryIgLPu3eEN9R1TI6Hsp66K8NKau:KWLCEr0z4i3eITxsz
Malware Config
Signatures
Files
-
0dfb7dc0c9ec1a9b11fecdef93a03b960015feab0db11f90c28a34f31e3b95de.exe windows x86
9f4373355b0acc013981b587f1e10de5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
RemoveDirectoryW
GetTickCount
FindResourceW
GetFileAttributesA
IsBadWritePtr
GetStringTypeA
HeapFree
GetExitCodeThread
IsValidCodePage
SetLastError
GetModuleHandleA
GetCurrentProcess
CreateDirectoryW
MapViewOfFile
GetDriveTypeW
GetFileAttributesA
VirtualProtect
FindClose
LocalLock
TlsGetValue
GetLocaleInfoW
user32
SetCursor
IsWindow
PeekMessageW
DispatchMessageA
LoadImageW
LoadCursorA
SetFocus
LoadStringA
GetWindowLongW
GetWindowTextW
PostMessageW
wsprintfW
IsDialogMessageA
msctf
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE