Static task
static1
Behavioral task
behavioral1
Sample
47b47115b0810a60853c43aae71d23e253bfb545c0ff89217c7b98c33a5b2bdb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47b47115b0810a60853c43aae71d23e253bfb545c0ff89217c7b98c33a5b2bdb.exe
Resource
win10v2004-20220812-en
General
-
Target
47b47115b0810a60853c43aae71d23e253bfb545c0ff89217c7b98c33a5b2bdb
-
Size
796KB
-
MD5
17df1ca09683f5cff7e063fdcf8ff3c0
-
SHA1
a07fc550b6e89ba9e2e8df3889a1092fa9df8a8c
-
SHA256
47b47115b0810a60853c43aae71d23e253bfb545c0ff89217c7b98c33a5b2bdb
-
SHA512
d936aa6579547151fdbe3bf1934b0ccdbd1529ba78b80e5112c1b11cf5c31a0d4c4d00ddaf0a7c9183af929934cf7c158cdd7a57f4d538c2957231ed33f2f87b
-
SSDEEP
24576:3vkEI3I0Rj0x8OsdU3/b6I+bv/Wp9bt4a:fkEL0mwvIM2bt4
Malware Config
Signatures
Files
-
47b47115b0810a60853c43aae71d23e253bfb545c0ff89217c7b98c33a5b2bdb.exe windows x86
d5a87a6ce9c0ec3ac768eff413667349
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
MapViewOfFile
FindClose
ResetEvent
GetModuleHandleA
CancelIo
SetLastError
FindResourceA
CreateMailslotW
IsBadWritePtr
GetProcessHeap
GetCommandLineA
GetStdHandle
GetExitCodeThread
GetLocaleInfoA
RemoveDirectoryA
VirtualProtect
HeapSize
CreateDirectoryA
GetDriveTypeW
ReleaseMutex
GetFileAttributesA
user32
GetWindowTextW
LoadImageW
PeekMessageA
LoadCursorA
DispatchMessageA
GetCapture
DestroyMenu
SetFocus
PostMessageW
GetWindowLongW
IsDialogMessageA
wsprintfA
SetCursor
ipsmsnap
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ