Static task
static1
Behavioral task
behavioral1
Sample
656a8713474ae126d66d9b8ab60b628047b902e987879c39fe45f18aee2892bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
656a8713474ae126d66d9b8ab60b628047b902e987879c39fe45f18aee2892bc.exe
Resource
win10v2004-20220901-en
General
-
Target
656a8713474ae126d66d9b8ab60b628047b902e987879c39fe45f18aee2892bc
-
Size
310KB
-
MD5
917ed5f8eda6bc0b5575f8222529e470
-
SHA1
7128add35e792f64caf981fb2866d31ffb7e7d0a
-
SHA256
656a8713474ae126d66d9b8ab60b628047b902e987879c39fe45f18aee2892bc
-
SHA512
15acd40e07d347baaa17841bbeb5e34b7064e32f2f86855586dd689060c11eee68fe403687d71cc5093018b4a13c0ff867cf310c4794d45e97dfae60e2fe07fa
-
SSDEEP
6144:GQkYMRrfLIcBHosgZqOONT6VASC199qRdEkXbnI/BR:gZpro5qH6VApiRiuI/r
Malware Config
Signatures
Files
-
656a8713474ae126d66d9b8ab60b628047b902e987879c39fe45f18aee2892bc.exe windows x86
2c261cf60f1e8b7f587c25fe4d1eae82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapFree
CreateDirectoryW
GetCurrentThread
GetCurrentProcess
CloseHandle
CreateEventA
GlobalLock
GetVersionExA
DeviceIoControl
VirtualProtectEx
GetPrivateProfileIntA
GetFileAttributesW
FindClose
SetCommBreak
LocalFlags
GetStringTypeA
SetLastError
GetFileAttributesW
GetModuleHandleA
GetPrivateProfileSectionA
RemoveDirectoryW
user32
IsDialogMessageA
PostMessageW
InsertMenuA
GetWindowTextW
IsWindow
wsprintfW
IsZoomed
DispatchMessageA
SetFocus
LoadCursorW
GetWindowLongW
PeekMessageW
SetCursorPos
netshell
DllCanUnloadNow
DllGetClassObject
HrCreateDesktopIcon
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ