Static task
static1
Behavioral task
behavioral1
Sample
4170fa84143fdd45d7731a04b0b996b8c7a14cfc78990e3add62e56b1c703f9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4170fa84143fdd45d7731a04b0b996b8c7a14cfc78990e3add62e56b1c703f9a.exe
Resource
win10v2004-20220901-en
General
-
Target
4170fa84143fdd45d7731a04b0b996b8c7a14cfc78990e3add62e56b1c703f9a
-
Size
796KB
-
MD5
74fa70e3eadc01aadbfcd0180b737b40
-
SHA1
f410849595a1919bda428d0746af3f1f94dae96a
-
SHA256
4170fa84143fdd45d7731a04b0b996b8c7a14cfc78990e3add62e56b1c703f9a
-
SHA512
e6aaff3211e580f54d77af6b4ac368ffbca610b16ae645677f8621896f0380d1e50805fda2f757db14e91459def340d4f53082269e7f73766c9ae22c0aaa0834
-
SSDEEP
24576:zQjVuZt7c3U2bTrlg6T9eQVUWHe9OugM0fhDMntofQ:UMZt7ck2/r9juEe9D0ZDMKf
Malware Config
Signatures
Files
-
4170fa84143fdd45d7731a04b0b996b8c7a14cfc78990e3add62e56b1c703f9a.exe windows x86
e828b913884eb23a4a3642e5feff767d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
GetProcessHeap
GetStdHandle
GetLocaleInfoA
FindClose
VirtualProtect
SetLastError
GetModuleHandleA
FindResourceA
CreateMailslotW
GetCommandLineA
CreateDirectoryA
MapViewOfFile
HeapSize
ResetEvent
ReleaseMutex
GetFileAttributesA
RemoveDirectoryA
CancelIo
GetDriveTypeW
GetExitCodeThread
user32
GetWindowTextW
GetCapture
LoadCursorA
LoadImageA
DispatchMessageA
DestroyMenu
IsDialogMessageA
PostMessageW
SetCursor
SetFocus
PeekMessageA
wsprintfA
GetWindowLongW
ipsmsnap
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ