Static task
static1
Behavioral task
behavioral1
Sample
2984343ad073e793cda4ded098b0fd3681afa1b85240ab9e0f91c63f090026b6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2984343ad073e793cda4ded098b0fd3681afa1b85240ab9e0f91c63f090026b6.exe
Resource
win10v2004-20220812-en
General
-
Target
2984343ad073e793cda4ded098b0fd3681afa1b85240ab9e0f91c63f090026b6
-
Size
799KB
-
MD5
4ad21b42b9c4a2e8eb6917add8e1a410
-
SHA1
998e3fb8740c3f9577e10af79267279c50285518
-
SHA256
2984343ad073e793cda4ded098b0fd3681afa1b85240ab9e0f91c63f090026b6
-
SHA512
6861f5ba6e87661bc18ef593dce5b1ce7b776a51c8551cd7b546c0d23596f59cf98bb72995d1848337828cb9fe83dbb239efec72a456dc09252b621ce6252dd3
-
SSDEEP
12288:GOQn31lJkK0F2z+7J95frRONBV/yUldMu3wN2phaoeZpAK81ji3DrRge3zrkttEi:FQubE+7lmBVuLkerp3RnktOu7PlD
Malware Config
Signatures
Files
-
2984343ad073e793cda4ded098b0fd3681afa1b85240ab9e0f91c63f090026b6.exe windows x86
1ebd9cbe8fe5ffdde68b8c0e947e1693
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindClose
RemoveDirectoryA
FindResourceA
GetLocaleInfoA
IsBadWritePtr
GetProcessHeap
VirtualProtect
GetStringTypeA
MapViewOfFile
CreateDirectoryA
GetModuleHandleA
GetTickCount
HeapSize
SetLastError
IsValidCodePage
GetFileAttributesA
GetExitCodeThread
GetDriveTypeW
ResetEvent
GetFileAttributesA
TlsGetValue
user32
LoadCursorA
SetFocus
SetCursor
GetWindowLongW
IsDialogMessageA
LoadImageW
wsprintfW
PeekMessageA
PostMessageW
GetCapture
IsWindow
GetWindowTextW
DispatchMessageA
msaatext
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE