Static task
static1
Behavioral task
behavioral1
Sample
0464c07db6a1a7e3096d00250afafe07cfebe1399b4361c242f67ee285ca7cad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0464c07db6a1a7e3096d00250afafe07cfebe1399b4361c242f67ee285ca7cad.exe
Resource
win10v2004-20220812-en
General
-
Target
0464c07db6a1a7e3096d00250afafe07cfebe1399b4361c242f67ee285ca7cad
-
Size
322KB
-
MD5
72e1683dd4b5c8ce50bc7e1ea48d4865
-
SHA1
465530fca8e2c2bd035f0f61f02c6f2e5f3b009c
-
SHA256
0464c07db6a1a7e3096d00250afafe07cfebe1399b4361c242f67ee285ca7cad
-
SHA512
616c6750681c0e6b181b4e0177185989b063680b46689c5212a7f1e9abb9fd6aa3706e9e2fb8f6a5857aa8ec2c5691e6eb6efce06a4b2baacafbb7f6bf74f4af
-
SSDEEP
6144:MGuwKcTrhyvp3JWhxI99VYowRihtv0BXr+ZqvC3SdHSOCZQ:Xsd4ipwwtv8Xr+Z1KSOCZQ
Malware Config
Signatures
Files
-
0464c07db6a1a7e3096d00250afafe07cfebe1399b4361c242f67ee285ca7cad.exe windows x86
f1d0fd92d093f99e370412beaed8986a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetComputerNameA
SetEvent
lstrcmpiA
HeapDestroy
Sleep
SearchPathA
ExitProcess
ResumeThread
GetStartupInfoA
AddAtomA
GetDiskFreeSpaceA
DeleteCriticalSection
CloseHandle
PulseEvent
VirtualProtect
ReleaseMutex
TlsGetValue
GetLastError
GetModuleHandleA
user32
CloseWindow
GetKeyState
CreateWindowExA
DispatchMessageA
GetMessageA
GetScrollBarInfo
CopyImage
DragDetect
EnableWindow
EndDialog
CreateMenu
CopyIcon
IsIconic
DialogBoxParamA
hlink
HlinkIsShortcut
HlinkResolveShortcut
HlinkNavigate
HlinkTranslateURL
HlinkClone
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ