Static task
static1
Behavioral task
behavioral1
Sample
1fdbcb9efd77bc244f5c157a329e26f0147c0f02969f6c0fbe31776f3f266007.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1fdbcb9efd77bc244f5c157a329e26f0147c0f02969f6c0fbe31776f3f266007.exe
Resource
win10v2004-20220812-en
General
-
Target
1fdbcb9efd77bc244f5c157a329e26f0147c0f02969f6c0fbe31776f3f266007
-
Size
310KB
-
MD5
60b844dbfba60fec7a667d84b8a69e60
-
SHA1
02e1150de56a6cbf6f1a9cb756cae760e0b49dfc
-
SHA256
1fdbcb9efd77bc244f5c157a329e26f0147c0f02969f6c0fbe31776f3f266007
-
SHA512
ff8ab608c96a9b15c9c1d508b6985623c7cacecb1430aa065d49409b9d4a04f87d463a65ec4841c1db1db44358124d32863615b00151b0890422049e8dfb2a01
-
SSDEEP
6144:dvcnd3789xGCGj27ZFvNFS8g4bh9jnMMSwRjIS2ODURzipU2AOE:BS7gGd27ZFvNs8g4NdRjs6UwAx
Malware Config
Signatures
Files
-
1fdbcb9efd77bc244f5c157a329e26f0147c0f02969f6c0fbe31776f3f266007.exe windows x86
a4b37991ba699c066010c0f13c00f5a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
ReadConsoleW
GetModuleFileNameA
TlsGetValue
EnterCriticalSection
GlobalLock
CreateFileA
Sleep
DeleteFileA
GetCurrentThreadId
GetLocalTime
RemoveDirectoryW
LocalFree
CreateDirectoryA
FindClose
DeleteFileA
GetFileTime
InitializeCriticalSection
GetStartupInfoW
VirtualProtect
GetModuleHandleA
GetDriveTypeA
GetConsoleMode
LeaveCriticalSection
GetConsoleAliasA
user32
GetWindowLongA
MessageBoxA
IsWindowEnabled
GetKeyState
GetWindowLongA
GetSysColor
DispatchMessageA
IsWindowVisible
FillRect
wsprintfA
EqualRect
PeekMessageA
GetWindowDC
d3d8thk
OsThunkDdBlt
OsThunkDdGetDC
OsThunkDdLock
OsThunkDdFlip
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE