Static task
static1
Behavioral task
behavioral1
Sample
415c65543e2ee279b1554c9c2138610620599bc263fa4c8561f4e41da402acba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
415c65543e2ee279b1554c9c2138610620599bc263fa4c8561f4e41da402acba.exe
Resource
win10v2004-20220812-en
General
-
Target
415c65543e2ee279b1554c9c2138610620599bc263fa4c8561f4e41da402acba
-
Size
312KB
-
MD5
50e8ec98283996ee7d2f77454ef4156c
-
SHA1
1c72f3ed229f8879d438f29cb20e28761b1c182b
-
SHA256
415c65543e2ee279b1554c9c2138610620599bc263fa4c8561f4e41da402acba
-
SHA512
a7eb00c401ec4e5ccc8e01433f31731e313c9bf91686c8ed4bfc5dbd4a3e366c92cb4829982c69c50c321f43fe4f863939c7bbfaf4fe7a174a28d68d9754609d
-
SSDEEP
6144:0cLmeIEeqo4+xZwywPBDvlBFQ6QXP9R14PFk4WcFLntnGcoIe/M68ETmFd:BeV4+xeywPBzzFQt4Fk4WcRtnGAe/M8u
Malware Config
Signatures
Files
-
415c65543e2ee279b1554c9c2138610620599bc263fa4c8561f4e41da402acba.exe windows x86
84440d1c10c709fb750321f03ef74830
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
EnterCriticalSection
RemoveDirectoryA
RaiseException
GetLocaleInfoA
LoadLibraryExA
Sleep
FindClose
ResetEvent
HeapCreate
GetSystemDirectoryA
GetACP
GetStdHandle
SetEvent
GetCommandLineA
SetErrorMode
GetLastError
VirtualProtect
ReleaseMutex
FindFirstFileExA
GlobalFree
user32
SetForegroundWindow
FlashWindowEx
GetClassNameA
ShowWindow
GetParent
EndPaint
GetWindow
IsIconic
BeginPaint
wsprintfA
GetWindowTextA
FillRect
FrameRect
GetActiveWindow
DrawTextA
ReleaseDC
GetFocus
GetCursorPos
ValidateRect
dnsapi
DnsApiRealloc
DnsStatusString
DnsApiAlloc
DnsFree
DnsApiFree
clbcatq
CoRegCleanup
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ