Static task
static1
Behavioral task
behavioral1
Sample
705b87135360eff68c37340dfd988ececc347afa2dc973bfadbd37cc85bb0e55.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
705b87135360eff68c37340dfd988ececc347afa2dc973bfadbd37cc85bb0e55.exe
Resource
win10v2004-20220812-en
General
-
Target
705b87135360eff68c37340dfd988ececc347afa2dc973bfadbd37cc85bb0e55
-
Size
114KB
-
MD5
6948d3744721637c1a3bd756d7818120
-
SHA1
93055333f161184af7870674f039cb7e7f7af3a8
-
SHA256
705b87135360eff68c37340dfd988ececc347afa2dc973bfadbd37cc85bb0e55
-
SHA512
2ddb3c42d4c0b3c2c3a707025471815e17ccdd06f9bddf5b48d34d60de089617ac0c8875a9cf5c490be7a4f05bf5253a75e4e5b56cfa857d3c42b83ebfc2df4a
-
SSDEEP
1536:+zsXO9dJE4H+/PtQCzQZGPo7k51W2+W+KtKNM0hZA/IupYyKg6Ik7oSpup2WDSHk:+zsXsm/Ptxxo70+pM9PpJKFqp+HL1q
Malware Config
Signatures
Files
-
705b87135360eff68c37340dfd988ececc347afa2dc973bfadbd37cc85bb0e55.exe windows x86
94557f3f4cb92d6c20544c5b60e98be5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidLocale
HeapCreate
IsBadStringPtrA
GetFileTime
GetLastError
lstrcpyW
FindResourceA
ReadFile
ReleaseMutex
lstrlenW
GetFileAttributesA
GetCurrentDirectoryA
WriteConsoleW
CloseHandle
WriteConsoleW
GetModuleHandleA
GetStartupInfoA
WriteConsoleW
GetFileSize
FormatMessageA
SetPriorityClass
msftedit
RichEditWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
RichComboBoxWndProc
clbcatq
ComPlusMigrate
DllGetClassObject
SetupOpen
CheckMemoryGates
ComPlusMigrate
SetSetupSave
SetSetupSave
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
CheckMemoryGates
SetupOpen
SetupOpen
dsprop
CheckADsError
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ