Static task
static1
Behavioral task
behavioral1
Sample
518d69b6ab8fc1539df47ef790c1a19dbbe3f95d198049e9d5dcac683b9032a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
518d69b6ab8fc1539df47ef790c1a19dbbe3f95d198049e9d5dcac683b9032a2.exe
Resource
win10v2004-20220812-en
General
-
Target
518d69b6ab8fc1539df47ef790c1a19dbbe3f95d198049e9d5dcac683b9032a2
-
Size
107KB
-
MD5
1047ed8e27b998bce27aec191a940bcc
-
SHA1
c1297d071e1010869c7bfe700dab1f25191bd24e
-
SHA256
518d69b6ab8fc1539df47ef790c1a19dbbe3f95d198049e9d5dcac683b9032a2
-
SHA512
c7956199e803258af5c5bb12c32d9fb92a752be999f7ab7a2aafc1243c7a10aaa05e54100566f8e4c39d92b48faa8828a7305535096f2c0b16667a64038a7352
-
SSDEEP
1536:pHSHEHLo6uHQlGNZnX0qVZ2yAxvRT6FuySr5dMReYiywmolRkPDT:7LoXwls50qVZ2b1ySrvpywjRa
Malware Config
Signatures
Files
-
518d69b6ab8fc1539df47ef790c1a19dbbe3f95d198049e9d5dcac683b9032a2.exe windows x86
b568875677e6d6083bd31bcb2191b6d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
SetLastError
FindClose
SetEndOfFile
GetTickCount
SuspendThread
WaitForSingleObject
GetCurrentDirectoryA
CloseHandle
HeapCreate
InitializeCriticalSection
GetProfileIntW
ExitProcess
GetTickCount
HeapDestroy
HeapSize
ReleaseMutex
GetStartupInfoW
ResetEvent
GetEnvironmentVariableA
CreateFileA
AddAtomA
CreateMutexW
GetModuleHandleA
GetFileSize
shell32
StrChrA
ShellAboutA
DragFinish
DragQueryFileA
ShellMessageBoxA
ExtractIconA
DragAcceptFiles
SHGetMalloc
SHFree
DllUnregisterServer
SHGetSettings
SHGetDiskFreeSpaceA
DuplicateIcon
dpmodemx
SPInit
SPInit
SPInit
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
twsxojv Size: - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE