Static task
static1
Behavioral task
behavioral1
Sample
271f5c63c4903b9220a44279b6c45183c86941df32152f9febb149f35bf2c3ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
271f5c63c4903b9220a44279b6c45183c86941df32152f9febb149f35bf2c3ea.exe
Resource
win10v2004-20220812-en
General
-
Target
271f5c63c4903b9220a44279b6c45183c86941df32152f9febb149f35bf2c3ea
-
Size
726KB
-
MD5
65dd8c665a4f5a8ab500201d2fdad3b0
-
SHA1
4c1b9cf232ac7c7d40b426ce7a0f59b8365ee962
-
SHA256
271f5c63c4903b9220a44279b6c45183c86941df32152f9febb149f35bf2c3ea
-
SHA512
0841ed108421e66709f329f8ab1595ad4cdfb80742426e6994fc8bfa77796e541c9c5437b0fe4821addaf6eb0c353bc4ba7238f87b0d40567bad690fd4311cc9
-
SSDEEP
12288:i6SXn/kuJCwmQAKoIKv7yt3SWckO6lGXtCW1sWaLSIstxVVwF:ijMuJCwmris0SjkO6lGgqsWaLSbxVE
Malware Config
Signatures
Files
-
271f5c63c4903b9220a44279b6c45183c86941df32152f9febb149f35bf2c3ea.exe windows x86
5442b1a1c82e730bcd578f964e0e3d6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwCreateProfile
oleaut32
VarI8FromCy
user32
SendMessageTimeoutW
GetFocus
GetDesktopWindow
AppendMenuW
kernel32
GetVolumePathNameA
Sections
.text Size: 718KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE