Static task
static1
Behavioral task
behavioral1
Sample
24d8013766295aab5ada64ab05aa3a0b40c605714690defcc43a41d9e655ff62.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
24d8013766295aab5ada64ab05aa3a0b40c605714690defcc43a41d9e655ff62.exe
Resource
win10v2004-20220812-en
General
-
Target
24d8013766295aab5ada64ab05aa3a0b40c605714690defcc43a41d9e655ff62
-
Size
31KB
-
MD5
67f4879fb17a7555c2ade29e996e42d0
-
SHA1
9af7a9fc19ddb0208feeb2e3bf67b941feb8f672
-
SHA256
24d8013766295aab5ada64ab05aa3a0b40c605714690defcc43a41d9e655ff62
-
SHA512
e0e586c2e2213b694eee37dbcb13697986fad83d8a1400f7976afba005de6353d92a240b749d002b897c09b1aa96f35274f7a26b08b387be6b4319ef19319b4f
-
SSDEEP
384:4k0Q+sXOkaS0xzZnvyj51/BGNPjdotIbxTXtH1:4k0+O75zWqNPjdo6bxTXD
Malware Config
Signatures
Files
-
24d8013766295aab5ada64ab05aa3a0b40c605714690defcc43a41d9e655ff62.exe windows x86
745fc1f4012c54bc9387b31c6a0231bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMailslotW
GetFileAttributesA
GetDriveTypeW
ResetEvent
HeapSize
GetExitCodeThread
GetLocaleInfoA
IsValidCodePage
FindClose
GetModuleHandleA
VirtualProtect
CreateDirectoryA
MapViewOfFile
FindResourceA
GetStdHandle
CancelIo
GetProcessHeap
RemoveDirectoryA
GetCommandLineA
IsBadWritePtr
SetLastError
user32
GetWindowLongW
SetCursor
IsDialogMessageA
LoadImageW
PeekMessageA
wsprintfA
LoadCursorA
DispatchMessageA
DestroyMenu
SetFocus
GetWindowTextW
PostMessageW
GetCapture
ipsmsnap
DllGetClassObject
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ