Static task
static1
Behavioral task
behavioral1
Sample
03cdefd2c67d37b3f23f33ca50b994067620a947be13f95279e18eea8ae583a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03cdefd2c67d37b3f23f33ca50b994067620a947be13f95279e18eea8ae583a5.exe
Resource
win10v2004-20220901-en
General
-
Target
03cdefd2c67d37b3f23f33ca50b994067620a947be13f95279e18eea8ae583a5
-
Size
101KB
-
MD5
405e736e42302f5fe6e1614241474479
-
SHA1
fdde6ce6637f1931599652991ce2fcb4fe6e74d3
-
SHA256
03cdefd2c67d37b3f23f33ca50b994067620a947be13f95279e18eea8ae583a5
-
SHA512
eb87184ed56e0ca283de7bb09d08307e430e318f002d3e481934aad8bf11c6c4ec63e11f10856bdab4cf3400f10a4c585586c45a0e8aabb4718bef022385a219
-
SSDEEP
1536:diW42/gm3hyOr7D3VZVXCVBvHwm+shlpdb3WHggt9s3QJsxFobmbAHsDp7L:dNiJOrHVSVRwm+shpb3WH7JaDfUMdX
Malware Config
Signatures
Files
-
03cdefd2c67d37b3f23f33ca50b994067620a947be13f95279e18eea8ae583a5.exe windows x86
938ad46900b9dc59993a1e37b96fcf81
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetFileSize
GetCurrentDirectoryA
GetCurrentProcessId
CreateEventA
LocalFree
ExitProcess
WaitForSingleObject
CreateMutexA
VirtualProtect
GetComputerNameA
DeleteFileA
VirtualAlloc
GetWindowsDirectoryA
GetModuleHandleA
GetCurrentThreadId
ReleaseMutex
LocalAlloc
WriteFile
GetSystemDirectoryA
user32
CreateDialogParamA
FindWindowA
GetSystemMetrics
GetClassInfoExA
GetActiveWindow
PostMessageA
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ