Static task
static1
Behavioral task
behavioral1
Sample
333585f96a9bf23745a90e3243d7ea9792402f6364de4802213c6027fea13649.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
333585f96a9bf23745a90e3243d7ea9792402f6364de4802213c6027fea13649.exe
Resource
win10v2004-20220812-en
General
-
Target
333585f96a9bf23745a90e3243d7ea9792402f6364de4802213c6027fea13649
-
Size
804KB
-
MD5
1166f2944a4a9eedbb1a06a949ed3e1c
-
SHA1
0184417793ac892ea4f02b9d6d634bef5ce64f67
-
SHA256
333585f96a9bf23745a90e3243d7ea9792402f6364de4802213c6027fea13649
-
SHA512
f776c481a2df528c67abe738773e0593e1601c5dc7a89026e75341604951c7cd34539f12e89e13e0655f4411cb090fdd094c009ebb9d321ef5c8d7913d7ba446
-
SSDEEP
12288:xg0THW0GRceJ3D80yioAhN9C9W4dzfPAf4P+2u5AARFWG2Ik5R:x3KSiPcfnTuOARwGU5R
Malware Config
Signatures
Files
-
333585f96a9bf23745a90e3243d7ea9792402f6364de4802213c6027fea13649.exe windows x86
2437f30e60a32bae2b53243d46225179
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
VirtualProtect
GlobalFlags
GetConsoleMode
CreateFileW
LeaveCriticalSection
GetModuleHandleA
GetCurrentThreadId
GetFileAttributesA
GetConsoleAliasW
CreateFileW
InterlockedExchange
GetDriveTypeW
LocalFree
GetProcessHeap
DeleteFileW
FindAtomA
CreateDirectoryA
ReadConsoleW
OpenEventA
HeapDestroy
CancelIo
GetModuleFileNameA
GetFileTime
SetFilePointer
user32
GetWindowTextA
wsprintfA
PeekMessageA
MessageBoxA
GetKeyState
GetWindowLongA
GetSysColor
IsWindowEnabled
IsZoomed
GetWindowDC
DispatchMessageA
LoadCursorA
GetWindowLongA
devenum
DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE