Static task
static1
Behavioral task
behavioral1
Sample
96c2120a5807dc9ce4dba98965eec099241854b13296f34fda3798efe6760410.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96c2120a5807dc9ce4dba98965eec099241854b13296f34fda3798efe6760410.exe
Resource
win10v2004-20220812-en
General
-
Target
96c2120a5807dc9ce4dba98965eec099241854b13296f34fda3798efe6760410
-
Size
797KB
-
MD5
6e408cafb2158016ebd8f241f37fc3cb
-
SHA1
29b95dd442efceb85fed5ce78b4405309a81e86d
-
SHA256
96c2120a5807dc9ce4dba98965eec099241854b13296f34fda3798efe6760410
-
SHA512
82efa42be0a80139896ae37947f3506d6dc89c5eee78c7457d8b1f54c27140c00dc8db95c0902c2b1d29eca6d62aae46db4699184f0ef6183018cdba0df90344
-
SSDEEP
24576:Fs7Q3f3VuLTq63W9cOGT2aNnft3+4z5LG5AD:F1/JePKaxV3LL
Malware Config
Signatures
Files
-
96c2120a5807dc9ce4dba98965eec099241854b13296f34fda3798efe6760410.exe windows x86
58cad2151bd7bf0c3d9688f3eb36ad02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
ReleaseMutex
GetStdHandle
GetCommandLineA
SetLastError
DeleteFileA
CreateDirectoryA
CancelIo
SetLocalTime
GetDriveTypeW
GetModuleHandleA
ResetEvent
RemoveDirectoryA
VirtualProtect
GetProcessHeap
GetLocaleInfoA
CreateMailslotA
HeapSize
IsBadWritePtr
WriteFile
MapViewOfFile
user32
DispatchMessageA
GetCapture
GetWindowTextW
SetFocus
LoadCursorA
PeekMessageA
SetCursor
GetWindowLongW
GetCaretPos
wsprintfA
LoadImageA
PostMessageW
DestroyMenu
filemgmt
DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 790KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ