Static task
static1
Behavioral task
behavioral1
Sample
39dd06fa06c3f930c81e92a41aab3d247d06927682303c259e8353be5f8fcf00.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
39dd06fa06c3f930c81e92a41aab3d247d06927682303c259e8353be5f8fcf00.exe
Resource
win10v2004-20220812-en
General
-
Target
39dd06fa06c3f930c81e92a41aab3d247d06927682303c259e8353be5f8fcf00
-
Size
301KB
-
MD5
6ccd420a28aca5380dacf1588aa757e0
-
SHA1
602066d47b9b21c219a43d4b6f0f8ccbc2107f21
-
SHA256
39dd06fa06c3f930c81e92a41aab3d247d06927682303c259e8353be5f8fcf00
-
SHA512
dad523f910cc61d45ebb2b63880809391cac8b9421693e570efb46b9b7835f1d630e5c45188734e7d21cbba81139d59e07ab7ee1b44dfc97401c4699cc36f161
-
SSDEEP
6144:HIsJBfZEPhfgW0JvIc7F4KarUva0m5m6wfj:PcJDrK93m5qfj
Malware Config
Signatures
Files
-
39dd06fa06c3f930c81e92a41aab3d247d06927682303c259e8353be5f8fcf00.exe windows x86
e77681d3a2c44130d8904b610102a2fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
SetLocalTime
GetFileAttributesA
HeapSize
ReleaseMutex
MapViewOfFile
CancelIo
WriteFile
DeleteFileA
CreateDirectoryA
GetStdHandle
GetModuleHandleA
IsBadWritePtr
CreateMailslotA
RemoveDirectoryA
ResetEvent
GetLocaleInfoA
SetLastError
VirtualProtect
GetProcessHeap
GetCommandLineA
user32
GetCapture
LoadCursorA
DispatchMessageA
SetFocus
PostMessageW
SetCursor
wsprintfA
LoadImageA
PeekMessageA
GetCaretPos
GetWindowTextW
GetWindowLongW
DestroyMenu
filemgmt
DllRegisterServer
DllUnregisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ