Static task
static1
Behavioral task
behavioral1
Sample
249d9187fb9af482e6ee82d55c050a5825b36da1de71a9051c973478ce0914b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
249d9187fb9af482e6ee82d55c050a5825b36da1de71a9051c973478ce0914b3.exe
Resource
win10v2004-20220812-en
General
-
Target
249d9187fb9af482e6ee82d55c050a5825b36da1de71a9051c973478ce0914b3
-
Size
305KB
-
MD5
65afa8442e6aab6c8aafcbe1acf498a0
-
SHA1
1ccf94da3a02f4ea06e4b28634f61d86da5cdc73
-
SHA256
249d9187fb9af482e6ee82d55c050a5825b36da1de71a9051c973478ce0914b3
-
SHA512
f88e550c0ca5637a02d8908fe8da6b779ed9398047ea741ebed08e14f150cb2b38f58d0e2fbca25225d854b20206f0ad8d7578994979f210e62959b4ad12c21e
-
SSDEEP
6144:JryiQ8/32hbs8bi2ocVfvOrfxCId/QXFu/nxaNWcWXZVt2mZ:H/329/tvAfQIdIc8QhtJ
Malware Config
Signatures
Files
-
249d9187fb9af482e6ee82d55c050a5825b36da1de71a9051c973478ce0914b3.exe windows x86
645d9034f6a4e9b44d61ddc1a3e602d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
GetModuleHandleA
SuspendThread
LocalLock
GetCurrentProcess
GetLocaleInfoW
SetPriorityClass
SetLastError
CreateDirectoryW
IsValidCodePage
RemoveDirectoryW
FindResourceW
GetStringTypeA
HeapFree
VirtualProtectEx
FindClose
CreateEventA
TlsGetValue
GetFileAttributesW
GetExitCodeThread
GetFileAttributesW
user32
IsWindow
wsprintfW
GetWindowTextW
PostMessageW
LoadCursorA
GetWindowLongW
SetCursorPos
DefDlgProcA
SetCursor
PeekMessageW
SetFocus
IsDialogMessageA
DispatchMessageA
msdtcprx
DTC_XaStart
DTC_XaCommit
DTC_XaEnd
DTC_XaOpen
uxtheme
CloseThemeData
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE