Static task
static1
Behavioral task
behavioral1
Sample
197061a670c06bd840f85dd1bcef7ef87d5a5772b4fdc6f9c62cb40b3b33101e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
197061a670c06bd840f85dd1bcef7ef87d5a5772b4fdc6f9c62cb40b3b33101e.exe
Resource
win10v2004-20220901-en
General
-
Target
197061a670c06bd840f85dd1bcef7ef87d5a5772b4fdc6f9c62cb40b3b33101e
-
Size
378KB
-
MD5
18204dc77dd7a0956b56fb7f08c2d307
-
SHA1
1db7cb929a3da0b050cc15260441c90e4fd3965f
-
SHA256
197061a670c06bd840f85dd1bcef7ef87d5a5772b4fdc6f9c62cb40b3b33101e
-
SHA512
b3a01a4a0c6f7dad3d340df256b2c3bbaeb35f8d9bc2485f42554811ec26bbe5593832eefff98af9396d5cc7cf4d8d17e9fc53cb056bdcaaa534a5a13ed3cedb
-
SSDEEP
6144:dgeN8Q7RDI5ZTxLCh1WQrzRBBsA/n+s/VxJmQIIvwTzPceuI88w:nP7RDIzNCh3aA96y0zP9N88w
Malware Config
Signatures
Files
-
197061a670c06bd840f85dd1bcef7ef87d5a5772b4fdc6f9c62cb40b3b33101e.exe windows x86
a5038d729262cb2120bb2a73ae6a6023
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DialogBoxParamW
CloseWindow
CopyRect
GetWindowTextLengthA
GetWindowTextA
CopyIcon
GetCursor
GetDlgItem
kernel32
GetConsoleMode
WriteFile
CreateProcessA
CreateThread
ReadFile
SetLastError
GetCommandLineA
GetFileSize
GlobalFree
GetCPInfo
FindFirstFileA
DeleteFileW
DeleteAtom
GetStdHandle
GetLastError
DeleteFileA
FindAtomA
OpenFileMappingA
GetFileTime
GetComputerNameA
ExitThread
Sleep
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 497KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ