Static task
static1
Behavioral task
behavioral1
Sample
f445098c2bd32140b8d821620565768e687939cf8c4ff5ff67002a1b184fc8b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f445098c2bd32140b8d821620565768e687939cf8c4ff5ff67002a1b184fc8b4.exe
Resource
win10v2004-20220812-en
General
-
Target
f445098c2bd32140b8d821620565768e687939cf8c4ff5ff67002a1b184fc8b4
-
Size
796KB
-
MD5
624e8fa4993fa62d55d1c8f1ce153230
-
SHA1
28bfcd3a075c252247aed5b4fe146b433847eab5
-
SHA256
f445098c2bd32140b8d821620565768e687939cf8c4ff5ff67002a1b184fc8b4
-
SHA512
4b1c6f479ae692c57fb4f822c858c23ef9842c5e41f305c796bbbdf1be54ed570c2932ccff6d5d5e4e88760b6c5b724cdf024bbf5470851bec37f6703c9ad2e6
-
SSDEEP
24576:Cy6eSIm2ADsouJf6ZoHJ6JB7+1hWOnZ2F6M4PnDh:T6GWDsouJfq+JM7KnZ24PnD
Malware Config
Signatures
Files
-
f445098c2bd32140b8d821620565768e687939cf8c4ff5ff67002a1b184fc8b4.exe windows x86
363c907a638f5e2f5829515e6f2c857f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVersionExA
SetCommBreak
CloseHandle
FindClose
CreateEventA
HeapFree
GetStringTypeA
LocalFlags
SetLastError
GetCurrentThread
GetPrivateProfileIntA
GetModuleHandleA
GetPrivateProfileSectionA
GetFileAttributesW
VirtualProtectEx
GlobalLock
DeviceIoControl
RemoveDirectoryW
GetFileAttributesW
GetCurrentProcess
CreateDirectoryW
user32
PeekMessageW
GetWindowTextW
LoadCursorW
IsWindow
DispatchMessageA
wsprintfW
GetWindowLongW
SetFocus
IsDialogMessageA
PostMessageW
FindWindowW
IsZoomed
SetCursorPos
mswsock
GetServiceA
GetNameByTypeA
GetAddressByNameA
getnetbyname
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ