Static task
static1
Behavioral task
behavioral1
Sample
40363cfcfe70fb9d01977805370c8873fb86ec2890dbe2f636cce7ddb95473cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40363cfcfe70fb9d01977805370c8873fb86ec2890dbe2f636cce7ddb95473cd.exe
Resource
win10v2004-20220812-en
General
-
Target
40363cfcfe70fb9d01977805370c8873fb86ec2890dbe2f636cce7ddb95473cd
-
Size
293KB
-
MD5
611f14bb94a4c824d5a008011d6d8ae0
-
SHA1
999021d9fb78b36da9fc2ff4a157f6ce8a117cdf
-
SHA256
40363cfcfe70fb9d01977805370c8873fb86ec2890dbe2f636cce7ddb95473cd
-
SHA512
8755bb2724fd048fdc942a6821ce7fb43bcca847e841341b84fb555e31935614dacbfa99627b20350f826f85693851b7443d3e02ccc97fb0654c93a5433a3a87
-
SSDEEP
6144:m9A3w6nvLfKgZ2Bhs+cj1uMz34fgHPV1LaI:QCw6OuIhTAw64fYfaI
Malware Config
Signatures
Files
-
40363cfcfe70fb9d01977805370c8873fb86ec2890dbe2f636cce7ddb95473cd.exe windows x86
7da20693a39216688b164ff30574b026
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesW
WriteConsoleW
GetStartupInfoA
CopyFileA
lstrcpyA
DeleteFileA
VirtualProtect
CreatePipe
lstrlenW
GetStdHandle
GetModuleHandleA
GetPriorityClass
SetEvent
HeapDestroy
ResumeThread
GetProcessHeap
DisconnectNamedPipe
GetCommandLineA
WriteConsoleW
WriteConsoleW
GetCurrentDirectoryA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllUnregisterServer
DllUnregisterServer
shell32
DragAcceptFiles
ShellAboutA
DragQueryFileA
ShellMessageBoxA
SHGetMalloc
SHGetDiskFreeSpaceA
DllUnregisterServer
SHGetSettings
SHFree
StrChrA
ExtractIconA
DuplicateIcon
DragFinish
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 285KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE