Static task
static1
Behavioral task
behavioral1
Sample
1e00b78d5f11cb627cb2f664a1536d877125f4725811a54e63f21e797acd201a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1e00b78d5f11cb627cb2f664a1536d877125f4725811a54e63f21e797acd201a.exe
Resource
win10v2004-20220812-en
General
-
Target
1e00b78d5f11cb627cb2f664a1536d877125f4725811a54e63f21e797acd201a
-
Size
775KB
-
MD5
09b5c981bb906debb1f44f29f1b6bcd6
-
SHA1
c59421cf6731eb56babb8da72f6fad9343b96109
-
SHA256
1e00b78d5f11cb627cb2f664a1536d877125f4725811a54e63f21e797acd201a
-
SHA512
21dc1fd8597e98e37970e237a6f1e4dc88ed748c7d674e014234ddb4cee631ab70d1ba50564863476b22526efae652fd2cbf8eb8215bdee3a55a79107e582160
-
SSDEEP
24576:tc0xT+XKFJdE5GxDZTqlcKtHMDG+4VmYET:6e4+d9xDZTqlJJ/NVmx
Malware Config
Signatures
Files
-
1e00b78d5f11cb627cb2f664a1536d877125f4725811a54e63f21e797acd201a.exe windows x86
ae62af5e18405c01b9205541173e9fb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CopyFileW
GetModuleHandleA
lstrlenW
GetPriorityClass
ClearCommBreak
GetStdHandle
GetLastError
WriteConsoleW
WriteConsoleW
HeapCreate
GetStartupInfoA
SetEvent
lstrcpyW
IsDebuggerPresent
DisconnectNamedPipe
GetCurrentDirectoryA
CreatePipe
CloseHandle
SuspendThread
GetFileAttributesA
WriteConsoleW
msftedit
RichEditWndProc
RichComboBoxWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
shell32
ShellAboutA
ShellMessageBoxA
DllUnregisterServer
ExtractIconA
SHGetMalloc
DragAcceptFiles
DragQueryFileA
StrChrA
SHGetDiskFreeSpaceA
SHGetSettings
SHFree
DragFinish
DuplicateIcon
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ