Static task
static1
Behavioral task
behavioral1
Sample
1375ef6d6392929f41d7d0ee00d341263d45a6a685f5bb9664d1a1932f2b72c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1375ef6d6392929f41d7d0ee00d341263d45a6a685f5bb9664d1a1932f2b72c9.exe
Resource
win10v2004-20220812-en
General
-
Target
1375ef6d6392929f41d7d0ee00d341263d45a6a685f5bb9664d1a1932f2b72c9
-
Size
300KB
-
MD5
6c3461fde543e53c3c51843de76efd20
-
SHA1
8b330776115b3eb472d38927f529f598120b01d6
-
SHA256
1375ef6d6392929f41d7d0ee00d341263d45a6a685f5bb9664d1a1932f2b72c9
-
SHA512
fe061e96bcb2aa6455b449dc81ce33b297139fb4cff091bde3f2f07606885c6ab7bf823404f3f2aaaa4e08f58c7a857176424894554f2a3a25e40607869ae1ce
-
SSDEEP
6144:iqWnpo7aYfA7wpnkOHS6574GKS81BdQdzFofr94eJB7i/oW:oplr2nkUS6JhkcfofuIV
Malware Config
Signatures
Files
-
1375ef6d6392929f41d7d0ee00d341263d45a6a685f5bb9664d1a1932f2b72c9.exe windows x86
12cc79532f6c228a4202c35da4ae4204
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
FindClose
CancelIo
GetDriveTypeW
GetTickCount
GetLocaleInfoA
FindResourceA
RemoveDirectoryA
VirtualProtect
CreateDirectoryA
IsBadWritePtr
CreateMailslotW
HeapSize
GetFileAttributesA
MapViewOfFile
ResetEvent
SetLastError
GetModuleHandleA
GetExitCodeThread
GetFileAttributesA
IsValidCodePage
user32
SetCursor
IsWindow
GetWindowLongW
PostMessageW
SetFocus
IsDialogMessageA
LoadCursorA
PeekMessageA
GetCapture
wsprintfW
DispatchMessageA
GetWindowTextW
LoadImageW
ipsmsnap
DllGetClassObject
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE