Static task
static1
Behavioral task
behavioral1
Sample
632eaa3907971bcc0ca9d40cb0b43c6f7d95566638ea2f0cc0772ecd6fdea888.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
632eaa3907971bcc0ca9d40cb0b43c6f7d95566638ea2f0cc0772ecd6fdea888.exe
Resource
win10v2004-20220812-en
General
-
Target
632eaa3907971bcc0ca9d40cb0b43c6f7d95566638ea2f0cc0772ecd6fdea888
-
Size
449KB
-
MD5
2c9f1623ad27f76c9d9f6e73332c4741
-
SHA1
141ce466e609a86d4ac250b52bec3a6a249ea492
-
SHA256
632eaa3907971bcc0ca9d40cb0b43c6f7d95566638ea2f0cc0772ecd6fdea888
-
SHA512
9be8a67825350576b6d744a9439be3b47b174636b011a34505cbbcf9b5290cd5e8f301c4a1e7b36cfc89fcfc6584c46d4ad49c41707859ccad4bad2a4bd6e9b6
-
SSDEEP
3072:IPEgJj7SmxHE6X8Wf6uyWiD7lWbhhiA+7Q:TgBSmxHE6sm04bhhZx
Malware Config
Signatures
Files
-
632eaa3907971bcc0ca9d40cb0b43c6f7d95566638ea2f0cc0772ecd6fdea888.exe windows x86
ff62f809e7cd872094f50ba941984a32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
FindFirstFileA
ReadProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
FindClose
user32
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
LoadStringA
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
ShowWindow
msvcrt
strlen
strcat
strcpy
memcpy
strrchr
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE