Static task
static1
Behavioral task
behavioral1
Sample
279a0c731bb5e409907427f014debab2a56e4f9fb0e341d27ed0239b16f02f61.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
279a0c731bb5e409907427f014debab2a56e4f9fb0e341d27ed0239b16f02f61.exe
Resource
win10v2004-20220812-en
General
-
Target
279a0c731bb5e409907427f014debab2a56e4f9fb0e341d27ed0239b16f02f61
-
Size
300KB
-
MD5
92194f245c5d6b5ad07b7d8e1829cf30
-
SHA1
c113ea3e64d27839013d0c0a6ec160187551fd81
-
SHA256
279a0c731bb5e409907427f014debab2a56e4f9fb0e341d27ed0239b16f02f61
-
SHA512
345d69d949e9fe8718dcebf5d31de1c7b991dac79e382a5d311557ca91afa570899694fdb736e1f0c70c3d27f5191b1b632cdc7cdc8a125deeaef68c7c9c15cf
-
SSDEEP
6144:g+vWnz3HzIXHdVDkmVAIFUZGYXcKYUcWr4v7WduxlpqgdQd:NewXdVD5sGY8UZr4v7Au7
Malware Config
Signatures
Files
-
279a0c731bb5e409907427f014debab2a56e4f9fb0e341d27ed0239b16f02f61.exe windows x86
c7849aebe06ad5a3a6fa43b1a4f5e128
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CancelIo
HeapSize
ResetEvent
GetFileAttributesA
MapViewOfFile
GetExitCodeThread
SetLastError
CreateDirectoryA
GetLocaleInfoA
FindResourceA
IsBadWritePtr
RemoveDirectoryA
GetProcessHeap
IsValidCodePage
VirtualProtect
CreateMailslotW
GetTickCount
GetDriveTypeW
GetModuleHandleA
FindClose
GetFileAttributesA
user32
LoadCursorA
LoadImageW
IsDialogMessageA
SetCursor
PeekMessageA
DispatchMessageA
IsWindow
PostMessageW
GetWindowTextW
GetCapture
GetWindowLongW
wsprintfA
SetFocus
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE