Static task
static1
Behavioral task
behavioral1
Sample
1f7f9d043c969439917852f694956d16259619fbb0aee92f3341463c0b5a4f3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f7f9d043c969439917852f694956d16259619fbb0aee92f3341463c0b5a4f3b.exe
Resource
win10v2004-20220812-en
General
-
Target
1f7f9d043c969439917852f694956d16259619fbb0aee92f3341463c0b5a4f3b
-
Size
414KB
-
MD5
627cd75e3fa23c5bafa1b5f73bda7b50
-
SHA1
dcc4b435834afd1fa67a3304922d269b72c3d8fb
-
SHA256
1f7f9d043c969439917852f694956d16259619fbb0aee92f3341463c0b5a4f3b
-
SHA512
106714fde0a2f1ba28a7e084b5a143c6f4ec5ae02742bbe7cc59dd8d3efa453fda91d554f8216551f13b1af8f77273dbfced2d2aa5b77779fba3b27a2ea895be
-
SSDEEP
12288:fZkBUN6/T0M9HmwWhmpR7Y12SmUcuvFrCjr:c/JWhyx86
Malware Config
Signatures
Files
-
1f7f9d043c969439917852f694956d16259619fbb0aee92f3341463c0b5a4f3b.exe windows x86
b018c7f26c003ffa68ff107a9e87ca30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
FindClose
RemoveDirectoryA
SetLastError
IsValidCodePage
GetTickCount
GetFileAttributesA
CreateDirectoryA
GetLocaleInfoA
GetProcessHeap
FindResourceA
ResetEvent
IsBadWritePtr
MapViewOfFile
GetStringTypeA
VirtualProtect
TlsGetValue
GetFileAttributesA
HeapSize
GetModuleHandleA
GetExitCodeThread
user32
SetCursor
GetWindowTextW
GetWindowLongW
LoadImageW
SetFocus
LoadCursorA
DispatchMessageA
IsWindow
IsDialogMessageA
wsprintfW
PeekMessageA
PostMessageW
GetCapture
msaatext
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE