Static task
static1
Behavioral task
behavioral1
Sample
a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b.exe
Resource
win10v2004-20220901-en
General
-
Target
a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b
-
Size
300KB
-
MD5
a20120062a1ddb5abf58c674ad023660
-
SHA1
33c042aaf21b64229a3ee8fa00390f96c67a9714
-
SHA256
a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b
-
SHA512
539a89f245ceb6ec9cfc520fd0d982cc3f25c61f3862013e112d3d98bfa5cc7ad1334672ca2ce329c3a08d1b8662ab2a6a4a8f58c75285602408f7c63a2e55cb
-
SSDEEP
6144:UlSWnu93+NLuC6vKljOuf+DrIhoG5L/hztBOMygTikuu:AGq6vKQDEi6J9
Malware Config
Signatures
Files
-
a250e5c0152c27b19be7a907c8d8ba856b1fced391d4cc680e5cd2fc6913823b.exe windows x86
d29a45702ff4a0c644eba24be7ce77d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMailslotW
GetExitCodeThread
GetModuleHandleA
HeapSize
CancelIo
GetStdHandle
GetFileAttributesA
SetLastError
ResetEvent
FindResourceA
GetLocaleInfoA
CreateDirectoryA
RemoveDirectoryA
GetDriveTypeW
GetCommandLineA
FindClose
GetProcessHeap
IsBadWritePtr
VirtualProtect
MapViewOfFile
IsValidCodePage
user32
DispatchMessageA
LoadCursorA
GetWindowLongW
GetCapture
SetCursor
PostMessageW
PeekMessageA
SetFocus
wsprintfA
GetWindowTextW
IsDialogMessageA
DestroyMenu
LoadImageW
ipsmsnap
DllGetClassObject
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE