Static task
static1
Behavioral task
behavioral1
Sample
c74f09af9406fbcdf854d89601f5817440853863039035c41176aab655e12ab5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c74f09af9406fbcdf854d89601f5817440853863039035c41176aab655e12ab5.exe
Resource
win10v2004-20220812-en
General
-
Target
c74f09af9406fbcdf854d89601f5817440853863039035c41176aab655e12ab5
-
Size
301KB
-
MD5
6970f611bc8874a1fb6508483fae1980
-
SHA1
c690f8f0b19dd98c7271277e14ec5cdd092a3407
-
SHA256
c74f09af9406fbcdf854d89601f5817440853863039035c41176aab655e12ab5
-
SHA512
2dbc1607b32298928c3a4c47d61df6d96ce355a9a698ad31547ccf425daf7c76997cfb76a117c997601bc997125f9b84c486d24d3f6cadc2a8af8a0b72fd8093
-
SSDEEP
6144:ZWnE3DUXYaGABRM7SIXWU630nCTb2dCY+PLfsQutnZWN:ooUXrGlSn0C5Dfs5ZW
Malware Config
Signatures
Files
-
c74f09af9406fbcdf854d89601f5817440853863039035c41176aab655e12ab5.exe windows x86
20858b6965706afb23ca3cc126895225
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
GetExitCodeThread
FindClose
CreateDirectoryA
RemoveDirectoryA
HeapSize
GetModuleHandleA
GetFileAttributesA
GetFileAttributesA
LocalLock
MapViewOfFile
IsValidCodePage
GetLocaleInfoA
GetTickCount
GetCurrentProcess
GetDriveTypeW
VirtualProtect
IsBadWritePtr
TlsGetValue
SetLastError
GetStringTypeA
user32
DispatchMessageA
wsprintfW
PostMessageW
LoadCursorA
LoadImageW
GetCapture
IsWindow
GetWindowTextW
GetWindowLongW
SetFocus
SetCursor
IsDialogMessageA
PeekMessageW
msaatext
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE