Static task
static1
Behavioral task
behavioral1
Sample
19151f1ba38d009f7fe42e1c8b0ada97b26f799e9921173b41173b87c48d0e52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19151f1ba38d009f7fe42e1c8b0ada97b26f799e9921173b41173b87c48d0e52.exe
Resource
win10v2004-20220812-en
General
-
Target
19151f1ba38d009f7fe42e1c8b0ada97b26f799e9921173b41173b87c48d0e52
-
Size
301KB
-
MD5
1055b10965344e4cb85327702a9462e0
-
SHA1
cdc50c8de49330ee3e493fd3d08a5aedc8b36516
-
SHA256
19151f1ba38d009f7fe42e1c8b0ada97b26f799e9921173b41173b87c48d0e52
-
SHA512
c12a1a56b920e2ffac242458ee93b577d971e8447e1b5916d91e65e0d4f2b6df04fa1f03f091df86c0d7f6ecd18f33ea4760fb3834b238740568e97fe49f786b
-
SSDEEP
6144:rVbWnXG6s0o3Dwd0x6fxfgbYvzOUA6/J0Ng/G9pSM:xqXGlafUYKUf/J0NGGr
Malware Config
Signatures
Files
-
19151f1ba38d009f7fe42e1c8b0ada97b26f799e9921173b41173b87c48d0e52.exe windows x86
ddbfaa26507977056e7d28ce08b7f892
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoA
GetTickCount
GetModuleHandleA
IsValidCodePage
MapViewOfFile
HeapSize
GetFileAttributesA
VirtualProtect
GetDriveTypeW
GetFileAttributesA
GetCurrentProcess
SetLastError
IsBadWritePtr
FindClose
CreateDirectoryW
LocalLock
RemoveDirectoryW
GetStringTypeA
GetExitCodeThread
FindResourceA
TlsGetValue
user32
wsprintfW
GetWindowLongW
LoadImageW
GetCapture
GetWindowTextW
SetFocus
IsWindow
IsDialogMessageA
SetCursor
LoadCursorA
DispatchMessageA
PeekMessageW
PostMessageW
msaatext
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE