Static task
static1
Behavioral task
behavioral1
Sample
7668f848b1074afcb690549556551493011575de66d862c5db9e16d6e83ef245.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7668f848b1074afcb690549556551493011575de66d862c5db9e16d6e83ef245.exe
Resource
win10v2004-20220812-en
General
-
Target
7668f848b1074afcb690549556551493011575de66d862c5db9e16d6e83ef245
-
Size
73KB
-
MD5
6eb90b02c8d22a15bb07d1cdb2c7e620
-
SHA1
6ed4a982e1a06b18b2cdc335e5b3298e580476b9
-
SHA256
7668f848b1074afcb690549556551493011575de66d862c5db9e16d6e83ef245
-
SHA512
8998434c40cfcf91b62cc71780e5b4525b36136db786097f069a9c6af23bc42142ae67963cf39bd57f00876dd2e944a8143334ee5ce504f1c877f157a70b674b
-
SSDEEP
1536:LcZSPyrqtAmoy0rFIE+nt15MR8uMJMncsSyGX9AqaPD95TsGbiKzER:LcZSPIgAmF6FI5iRAmcsSyGX9AqW95Tq
Malware Config
Signatures
Files
-
7668f848b1074afcb690549556551493011575de66d862c5db9e16d6e83ef245.exe windows x86
29bf70ee41916038ff82392d549639d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
SetFileTime
FormatMessageW
IsBadWritePtr
SetFileTime
LeaveCriticalSection
GetLastError
SetFileTime
lstrcatA
CreateMutexW
FindResourceA
lstrcpyA
GetModuleHandleA
SetFileAttributesW
GetLocalTime
GetCurrentDirectoryW
GetStartupInfoW
GetFileSize
CloseHandle
ReadFile
InitializeCriticalSection
msi
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
user32
IsDialogMessageA
LoadCursorW
PeekMessageW
wsprintfW
SetFocus
DispatchMessageA
GetWindowLongW
PostMessageW
IsZoomed
IsWindow
GetWindowTextA
GetWindowRect
SetCursorPos
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE