Static task
static1
Behavioral task
behavioral1
Sample
041ea93247adaee689dbd6cc58c629ba99cc4620e23702334f15b9ce6115d500.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
041ea93247adaee689dbd6cc58c629ba99cc4620e23702334f15b9ce6115d500.exe
Resource
win10v2004-20220901-en
General
-
Target
041ea93247adaee689dbd6cc58c629ba99cc4620e23702334f15b9ce6115d500
-
Size
311KB
-
MD5
60c81d27c447e62b2ba0772e31f5a440
-
SHA1
8e89b43174d64fe9e62ac9c5cf2d0e235e14c744
-
SHA256
041ea93247adaee689dbd6cc58c629ba99cc4620e23702334f15b9ce6115d500
-
SHA512
65674397cf437fe9b8d0bd87fc1439a5d343b9ddec2b3fa2279e6c07b54d5cf9ae8ca18f71b6a05a91315a69abd57d7685ca14f8a5d0118779a6b54f2b36b645
-
SSDEEP
6144:CnR7LS5LfW+4Q223WPAG3U3y7jt9w9Kc0ZdN/CMXiA:SNLSdfW+4QN3WoG3Wst9wkz/CXA
Malware Config
Signatures
Files
-
041ea93247adaee689dbd6cc58c629ba99cc4620e23702334f15b9ce6115d500.exe windows x86
024792b0456a80dc124ac7da736bb069
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
GetModuleHandleA
FindClose
GlobalLock
CreateDirectoryW
SetLastError
GetVersionExA
CloseHandle
GetStdHandle
GetFileAttributesW
RemoveDirectoryA
GetPrivateProfileSectionA
GetStringTypeA
GetCurrentThread
GlobalFlags
GetFileAttributesW
CreateEventA
DeviceIoControl
GetPrivateProfileIntA
GetCurrentProcess
VirtualProtectEx
shell32
DragAcceptFiles
SHFree
DragFinish
DllUnregisterServer
StrChrA
DragQueryFileA
SHGetMalloc
DuplicateIcon
ExtractIconA
DllUnregisterServer
ShellMessageBoxA
ShellAboutA
SHGetSettings
ntmarta
AccFreeIndexArray
AccGetExplicitEntries
AccConvertAclToAccess
AccConvertSDToAccess
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ