Static task
static1
Behavioral task
behavioral1
Sample
f2099f2511d5dae267f067ae03726a1fbf72d1fc34657de8246456f4dcf0dd55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2099f2511d5dae267f067ae03726a1fbf72d1fc34657de8246456f4dcf0dd55.exe
Resource
win10v2004-20220901-en
General
-
Target
f2099f2511d5dae267f067ae03726a1fbf72d1fc34657de8246456f4dcf0dd55
-
Size
65KB
-
MD5
6dafb88e9135a0178d7fa7a2a5387da0
-
SHA1
ef2ffa74c9f125de55c70c5b133e4fb59aff4b6e
-
SHA256
f2099f2511d5dae267f067ae03726a1fbf72d1fc34657de8246456f4dcf0dd55
-
SHA512
8021184ce7207d1bd94c7521f929eb4b056718f152e0d70ae0ed94f6f07141a690ad4800e373c04f608bdc68b95ec98258e7645e7257506085bca6a5484f6f91
-
SSDEEP
1536:/9EuzRY2bFWvqtuwGTIPHiC359qEbZtDqi2WZZ/Ep:/9EuzRY2bc3wP359jb3Dqfocp
Malware Config
Signatures
Files
-
f2099f2511d5dae267f067ae03726a1fbf72d1fc34657de8246456f4dcf0dd55.exe windows x86
26f7d0f4a2852f473140731632e00ad7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
GetCurrentDirectoryW
lstrcpyA
HeapCreate
GetModuleHandleA
CloseHandle
GetLocalTime
LeaveCriticalSection
FindResourceA
GetLastError
IsBadWritePtr
ReadFile
InitializeCriticalSection
SetFileAttributesW
SetFileTime
GetFileSize
lstrcatA
GetStartupInfoW
CreateMutexW
FormatMessageW
SetFileTime
msi
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
user32
IsWindow
GetWindowTextA
PeekMessageW
LoadCursorW
PostMessageW
IsZoomed
GetWindowRect
SetFocus
IsDialogMessageA
SetCursorPos
GetWindowLongW
wsprintfW
DispatchMessageA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE