Static task
static1
Behavioral task
behavioral1
Sample
c739792faded3c444320f2e493965deca3cca164960d976d974188521a8acb85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c739792faded3c444320f2e493965deca3cca164960d976d974188521a8acb85.exe
Resource
win10v2004-20220812-en
General
-
Target
c739792faded3c444320f2e493965deca3cca164960d976d974188521a8acb85
-
Size
121KB
-
MD5
826bc035e5a2f47add63b95868d2cd30
-
SHA1
847697a1deccf4c10fc0f1c9b1f68b8db3ec8133
-
SHA256
c739792faded3c444320f2e493965deca3cca164960d976d974188521a8acb85
-
SHA512
329f76e7738d28b70fd1c0af1f13a45dee8eba0c87893262cc741ce9f78431e2b187dac1948d7598912a0df999c78c1b7266ce125f07d334c9a12f742769563b
-
SSDEEP
1536:V2t0kPK32tB7921rvObU37grS9XKWLFdUauwgkEMRXHExhKKK89Aq8gDy:VeBh+UStD3RlXwsKl9Sb
Malware Config
Signatures
Files
-
c739792faded3c444320f2e493965deca3cca164960d976d974188521a8acb85.exe windows x86
b50f237253bcd65ea9902b6c2edec0d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
VirtualProtect
SetLocalTime
DeleteFileA
GetDriveTypeW
WriteFile
CreateDirectoryA
CancelIo
MapViewOfFile
GetProcessHeap
ReleaseMutex
GetStdHandle
GetCommandLineA
GetFileAttributesA
CreateMailslotA
SetLastError
GetLocaleInfoA
RemoveDirectoryA
GetModuleHandleA
ResetEvent
HeapSize
user32
LoadCursorA
SetFocus
GetWindowTextW
PostMessageW
LoadImageA
GetWindowLongW
wsprintfA
DispatchMessageA
GetCaretPos
PeekMessageA
SetCursor
DestroyMenu
GetCapture
filemgmt
DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ