Static task
static1
Behavioral task
behavioral1
Sample
f30455a87f171ccab141351826f4ea775f30abedfa3c2501785d96d50ba74466.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f30455a87f171ccab141351826f4ea775f30abedfa3c2501785d96d50ba74466.exe
Resource
win10v2004-20220901-en
General
-
Target
f30455a87f171ccab141351826f4ea775f30abedfa3c2501785d96d50ba74466
-
Size
301KB
-
MD5
252650b392b52aa3f993b983e0e68170
-
SHA1
4f9e1e8a8b8c0b5f949d3f36f248b7504d271190
-
SHA256
f30455a87f171ccab141351826f4ea775f30abedfa3c2501785d96d50ba74466
-
SHA512
89a0afb12bcfe36d2524816a9c32072d2c23f677ddc53311a6f5c77676cc132be0a120480c8c83fd44b9544b72e2f8797b07673e0f09ae587ddc8a59095d08c0
-
SSDEEP
6144:LWnVqUCKQmdZBc7yzGlj1Nnt81kjycbDndC6a0AstyViGEGwX:aVq9mDBsLp10CBC6a/gIEGw
Malware Config
Signatures
Files
-
f30455a87f171ccab141351826f4ea775f30abedfa3c2501785d96d50ba74466.exe windows x86
744a03b79729714b22a4f9e221549eed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
MapViewOfFile
GetExitCodeThread
GetFileAttributesA
FindResourceW
GetTickCount
RemoveDirectoryW
GetDriveTypeW
LocalLock
IsBadWritePtr
GetLocaleInfoW
GetFileAttributesA
VirtualProtect
IsValidCodePage
HeapFree
FindClose
GetCurrentProcess
CreateDirectoryW
TlsGetValue
GetStringTypeA
SetLastError
user32
GetWindowTextW
wsprintfW
LoadImageW
DispatchMessageA
LoadCursorA
SetFocus
SetCursor
IsDialogMessageA
IsWindow
PeekMessageW
GetWindowLongW
LoadStringA
PostMessageW
msctf
DllUnregisterServer
DllCanUnloadNow
TF_InitSystem
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE