Static task
static1
Behavioral task
behavioral1
Sample
984704952e38f0469a6e0d1d3d22b72cc89df8eff24623642e29d3a40b6bcef2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
984704952e38f0469a6e0d1d3d22b72cc89df8eff24623642e29d3a40b6bcef2.exe
Resource
win10v2004-20220812-en
General
-
Target
984704952e38f0469a6e0d1d3d22b72cc89df8eff24623642e29d3a40b6bcef2
-
Size
299KB
-
MD5
914da0d9b5a749114f9b2d2277904980
-
SHA1
6fa020baa44a1487ec1d5462a8fd9966011304ea
-
SHA256
984704952e38f0469a6e0d1d3d22b72cc89df8eff24623642e29d3a40b6bcef2
-
SHA512
edffe83d45b2f5b40e9975e31c1710bf263e29c8bde1120dbc5fc2ab4bf17980cb62c57d73cf20cf68104889244b3219d1a903ed119337d6b7f190057e659293
-
SSDEEP
6144:AGeQQGuVWNr1U3zw/6kALJ/Q1h9UnGFMKd:xeou+Czw/pAlQ1zrM
Malware Config
Signatures
Files
-
984704952e38f0469a6e0d1d3d22b72cc89df8eff24623642e29d3a40b6bcef2.exe windows x86
79ef16e804940f4c4cd2be580e24756b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidLocale
IsBadStringPtrA
GetLastError
GetStartupInfoA
SetEvent
GetCurrentDirectoryA
CreatePipe
GetPriorityClass
CloseHandle
lstrcpyW
IsBadCodePtr
HeapCreate
DisconnectNamedPipe
WriteConsoleW
ReleaseMutex
WriteConsoleW
GetFileAttributesA
CopyFileW
WriteConsoleW
GetModuleHandleA
lstrlenW
msftedit
RichComboBoxWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
RichEditWndProc
shell32
DuplicateIcon
SHGetDiskFreeSpaceA
SHGetMalloc
ShellAboutA
StrChrA
SHGetSettings
SHGetDiskFreeSpaceA
DragQueryFileA
ShellMessageBoxA
ExtractIconA
ShellMessageBoxA
DragAcceptFiles
SHGetMalloc
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ