Static task
static1
Behavioral task
behavioral1
Sample
f433d41bb03f3215aeb00ccc7a09a7bef4172a5342fd1f4b7dc15b482c6add2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f433d41bb03f3215aeb00ccc7a09a7bef4172a5342fd1f4b7dc15b482c6add2f.exe
Resource
win10v2004-20220812-en
General
-
Target
f433d41bb03f3215aeb00ccc7a09a7bef4172a5342fd1f4b7dc15b482c6add2f
-
Size
304KB
-
MD5
6884f643c9353e5cd3640fbdf6e8ed46
-
SHA1
1265efccefb024e8e94cc8b7b441a4f7dea9936c
-
SHA256
f433d41bb03f3215aeb00ccc7a09a7bef4172a5342fd1f4b7dc15b482c6add2f
-
SHA512
8b9731bd2537f4d5ed15d4d60fba461b889c30b2c6092749a2b59c10ccdfced6be3a8f080a23c1616946a353daf673c1bd49aeb663bd943749ae88eb4cf261ca
-
SSDEEP
6144:Z6IBhQpk5v0KqMroTke33a9mLJMxYZXjwomckqIPZDC81keRvygeXWUk6i:grWB0z3OmLJMxUkomc4ZD92eJ+NJ
Malware Config
Signatures
Files
-
f433d41bb03f3215aeb00ccc7a09a7bef4172a5342fd1f4b7dc15b482c6add2f.exe windows x86
457a9087187fd33fde85db03b26561e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
CreateFileA
GetPrivateProfileIntA
TlsAlloc
GetTickCount
TlsGetValue
GlobalFree
MapViewOfFile
GetFileAttributesW
CloseHandle
ExitProcess
SetLastError
GetModuleHandleW
VirtualAlloc
FindClose
GetComputerNameA
GetLocalTime
GetLastError
GetStdHandle
FindAtomA
user32
DispatchMessageA
GetClientRect
GetClassInfoA
FillRect
DestroyCaret
CloseWindow
CreateWindowExA
CallWindowProcA
GetMenu
DrawStateA
GetDlgItem
EndDialog
GetCaretPos
clbcatq
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
d3dim
D3DFree
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ