Static task
static1
Behavioral task
behavioral1
Sample
324821720b2e2f1302526b950a72f098535ccd89d65ae4912a70c54ea70d8007.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
324821720b2e2f1302526b950a72f098535ccd89d65ae4912a70c54ea70d8007.exe
Resource
win10v2004-20220812-en
General
-
Target
324821720b2e2f1302526b950a72f098535ccd89d65ae4912a70c54ea70d8007
-
Size
310KB
-
MD5
7072eef2c53c26616ac830d63971af00
-
SHA1
42ab5be31623e751d5950bf7f99bc85fb60e735b
-
SHA256
324821720b2e2f1302526b950a72f098535ccd89d65ae4912a70c54ea70d8007
-
SHA512
32170a141e10d6c3b326f25a2ccf0a4757ed7b74b38cf10e2568e2f36a62c95dc453a86b57565645f8567f6748e337cfd6b6e6780e3c4271a4c6d8a539d309f9
-
SSDEEP
6144:LXNnd37FtMvygbfaKwiC2HiQTrztypIZRhtlBUzF9JlXuTfUZrM5:LXD7DMKgbaKwilH/y6ZRzM9l4faI
Malware Config
Signatures
Files
-
324821720b2e2f1302526b950a72f098535ccd89d65ae4912a70c54ea70d8007.exe windows x86
f085cc0fd93114c0ef901777dd0336c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GetCurrentThreadId
InitializeCriticalSection
RemoveDirectoryW
GetConsoleMode
TlsGetValue
CreateFileA
LocalLock
FindClose
GetStartupInfoA
GetProcessHeap
GetModuleHandleA
GetFileTime
GetCalendarInfoW
DeleteFileA
GetLocalTime
VirtualProtectEx
CloseHandle
ReadConsoleA
CreateDirectoryA
GetDriveTypeA
EnterCriticalSection
GetModuleFileNameA
LeaveCriticalSection
Sleep
user32
DispatchMessageA
GetKeyState
GetSysColor
GetWindowLongA
FillRect
IsWindowEnabled
EqualRect
MessageBoxA
GetWindowDC
PeekMessageA
IsWindowVisible
wsprintfA
GetWindowLongA
cryptsvc
CryptServiceMain
CryptServiceMain
CryptServiceMain
CryptServiceMain
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE