Static task
static1
Behavioral task
behavioral1
Sample
1ff0375706757e44e2f6a4d40b6a571e3d2a1ed2a723d69503d5af034c17a4fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ff0375706757e44e2f6a4d40b6a571e3d2a1ed2a723d69503d5af034c17a4fd.exe
Resource
win10v2004-20220812-en
General
-
Target
1ff0375706757e44e2f6a4d40b6a571e3d2a1ed2a723d69503d5af034c17a4fd
-
Size
394KB
-
MD5
9152101a104f11eb2fd8068513c86ac0
-
SHA1
29b2d4de15a726d6fce4954a909afbca09d0a577
-
SHA256
1ff0375706757e44e2f6a4d40b6a571e3d2a1ed2a723d69503d5af034c17a4fd
-
SHA512
0496fbb32c64eeea547496ee5f46ebcf1c78c038af0979b46ce34f4d984a653fe37cbbbce611a08eb04565e3da8b5bed48dbdf8a8771f826749132c746825161
-
SSDEEP
12288:erCwMBT5xTH2CGg9qgTYjxv/OBj4zciqXhR:ZxBXTHbGg9qgTmxe5vRR
Malware Config
Signatures
Files
-
1ff0375706757e44e2f6a4d40b6a571e3d2a1ed2a723d69503d5af034c17a4fd.exe windows x86
808956f8236eb45453cb9bb9c18da0bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReleaseMutex
lstrlenW
GetCurrentDirectoryA
GetLastError
GetStartupInfoA
WriteConsoleW
GetModuleHandleA
lstrcpyW
CreatePipe
DisconnectNamedPipe
SetEvent
GetFileAttributesA
GetPriorityClass
HeapCreate
WriteConsoleW
GetStdHandle
CopyFileW
CloseHandle
WriteConsoleW
IsDebuggerPresent
ClearCommBreak
msftedit
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichEditWndProc
shell32
ShellMessageBoxA
StrChrA
SHGetSettings
ShellAboutA
DragAcceptFiles
ExtractIconA
SHGetDiskFreeSpaceA
SHGetMalloc
SHFree
DuplicateIcon
DragQueryFileA
DllUnregisterServer
DragFinish
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ