Static task
static1
Behavioral task
behavioral1
Sample
56ed5dd65773ef2272cf028453aa5c5116697ae5ddfde6e210932dce8cdab7fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56ed5dd65773ef2272cf028453aa5c5116697ae5ddfde6e210932dce8cdab7fa.exe
Resource
win10v2004-20220812-en
General
-
Target
56ed5dd65773ef2272cf028453aa5c5116697ae5ddfde6e210932dce8cdab7fa
-
Size
301KB
-
MD5
62902a87c621c08ed75f7d33de2831e0
-
SHA1
5cdfe38cfb5be17ed00f1b360fdb9ad2f5cc7729
-
SHA256
56ed5dd65773ef2272cf028453aa5c5116697ae5ddfde6e210932dce8cdab7fa
-
SHA512
0579b7e538514d6c096c502b5a0ff660a556d9bfd3cb8769a78c99df1b953b3739e3553258782af2ffc6c92607204ddbd225cf7fda2746f1ea0cf856b895d954
-
SSDEEP
6144:yWnfMWCr3dkW0X8W7RX1k4HF+5s+2zt6e3I1a1:xUd5fI8W7R24l+5sJzt6eY8
Malware Config
Signatures
Files
-
56ed5dd65773ef2272cf028453aa5c5116697ae5ddfde6e210932dce8cdab7fa.exe windows x86
5dcbcabababe4d418093e6a114ddfeb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
MapViewOfFile
CreateDirectoryW
GetTickCount
SetLastError
GetFileAttributesA
GetStringTypeA
GetLocaleInfoA
GetModuleHandleA
VirtualProtect
GetExitCodeThread
LocalLock
FindResourceA
GetDriveTypeW
FindClose
IsBadWritePtr
HeapSize
IsValidCodePage
RemoveDirectoryW
GetFileAttributesA
TlsGetValue
user32
IsDialogMessageA
SetFocus
DispatchMessageA
PostMessageW
SetCursor
IsWindow
LoadImageW
PeekMessageW
GetWindowTextW
LoadCursorA
GetWindowLongW
wsprintfW
GetCapture
msaatext
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE