Static task
static1
Behavioral task
behavioral1
Sample
33598b4c5e3299200a5beb16a831d474d12fd56f632a90eeb4104905a16a8a38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33598b4c5e3299200a5beb16a831d474d12fd56f632a90eeb4104905a16a8a38.exe
Resource
win10v2004-20220812-en
General
-
Target
33598b4c5e3299200a5beb16a831d474d12fd56f632a90eeb4104905a16a8a38
-
Size
300KB
-
MD5
611b88267507e3275a268265ea493010
-
SHA1
ea041ddfffcefe12d760bda2e0ebc990080b6485
-
SHA256
33598b4c5e3299200a5beb16a831d474d12fd56f632a90eeb4104905a16a8a38
-
SHA512
7089758912207f6c5c5cf8ef2f5b5dbf78721c846f8bbce8ee1b1124305c13d1f24acc55eb6605246121c1a0b8cd516c70c32172d4522698998f36867c1060e2
-
SSDEEP
6144:KqWn7SsrtREbuynQEODENrJ6D0OOcolvPUKW8BzjRFsOteVdiRJS:YVrEbzQErq0OPotcKW8BzjcEAiW
Malware Config
Signatures
Files
-
33598b4c5e3299200a5beb16a831d474d12fd56f632a90eeb4104905a16a8a38.exe windows x86
754dfac180d2a7b11060538a19c6e8fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
IsBadWritePtr
MapViewOfFile
FindResourceA
GetLocaleInfoA
CancelIo
GetFileAttributesA
GetFileAttributesA
ResetEvent
CreateMailslotW
CreateDirectoryA
GetDriveTypeW
GetTickCount
GetExitCodeThread
FindClose
GetModuleHandleA
GetProcessHeap
VirtualProtect
RemoveDirectoryA
HeapSize
IsValidCodePage
user32
GetWindowTextW
DispatchMessageA
IsDialogMessageA
SetCursor
LoadCursorA
GetCapture
SetFocus
PostMessageW
LoadImageW
IsWindow
GetWindowLongW
wsprintfW
PeekMessageA
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE