Static task
static1
Behavioral task
behavioral1
Sample
1b33a92d65d212e8662e59bd606a6caabb0df24f5d88fe9fad08bdfcda495010.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1b33a92d65d212e8662e59bd606a6caabb0df24f5d88fe9fad08bdfcda495010.exe
Resource
win10v2004-20220901-en
General
-
Target
1b33a92d65d212e8662e59bd606a6caabb0df24f5d88fe9fad08bdfcda495010
-
Size
300KB
-
MD5
a1d01b7a86b50cbb63cb76ae8b7b4ee0
-
SHA1
7050a3fb53f2f0cfbcf30a767be9316deb402d7a
-
SHA256
1b33a92d65d212e8662e59bd606a6caabb0df24f5d88fe9fad08bdfcda495010
-
SHA512
d07a160be815168571162227e322e753607b1390c0e69cdb9bc151551a0b731212442de85e18825c9df5cee534118b6b8a901072f60a00281df0b4ebf3f41d5b
-
SSDEEP
6144:qfZUb07ol3zc+RIngdVl5IcjQHIvvivqy4jPf:qfC078j1RIgPbp0ovvivqy4z
Malware Config
Signatures
Files
-
1b33a92d65d212e8662e59bd606a6caabb0df24f5d88fe9fad08bdfcda495010.exe windows x86
31bb74d5688c6bbb2456961bf7090cdf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
GetCommandLineA
HeapSize
GetFileAttributesA
CreateDirectoryA
GetLocaleInfoA
ResetEvent
RemoveDirectoryA
GetModuleHandleA
GetDriveTypeA
CreatePipe
SetLocalTime
ReadConsoleW
WriteFile
ReleaseMutex
GetStdHandle
GetPriorityClass
DeleteFileA
SetLastError
VirtualProtect
GetProcessHeap
user32
DestroyMenu
DispatchMessageA
GetCaretPos
DrawIcon
GetCapture
PostMessageA
LoadCursorA
GetWindowLongW
SetFocus
wsprintfA
GetWindowTextW
PeekMessageA
SetCursor
els
DllGetClassObject
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ