Static task
static1
Behavioral task
behavioral1
Sample
58ee9804d1060d5bb285f3b0d9c15e321e90b9468d1cba9561d341fc5a43307b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58ee9804d1060d5bb285f3b0d9c15e321e90b9468d1cba9561d341fc5a43307b.exe
Resource
win10v2004-20220812-en
General
-
Target
58ee9804d1060d5bb285f3b0d9c15e321e90b9468d1cba9561d341fc5a43307b
-
Size
311KB
-
MD5
a10ab3cd2a69e2187a0fd3c5ba45c600
-
SHA1
36208839b8ac88d2c3c3a22e04c473086df0d569
-
SHA256
58ee9804d1060d5bb285f3b0d9c15e321e90b9468d1cba9561d341fc5a43307b
-
SHA512
f630209d17cdbea146b61fdb9e6b2fc41b5bfcb8c14c1f348b01d85df0d91835a741ad350f54881ae7a914a297e6889972d90e13290ee671ae69182af3024f9c
-
SSDEEP
6144:DZcHaD288jT/eKObD2upw+/gRZDJWASlJmt/wLkQKhA55xh7GYz7D:cjn//0b1ngTDJslJswLOhAJN5D
Malware Config
Signatures
Files
-
58ee9804d1060d5bb285f3b0d9c15e321e90b9468d1cba9561d341fc5a43307b.exe windows x86
5cc8ea8046b28017e86f5c45d4899a5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
GetModuleHandleW
LeaveCriticalSection
CreateMutexW
ReadFile
FormatMessageW
SetFileAttributesW
lstrcpyA
GetLocalTime
GetFileSize
HeapCreate
SetFileTime
FindResourceA
GetLastError
lstrcatA
GetStartupInfoW
CloseHandle
IsBadWritePtr
GetModuleHandleA
SetFileTime
InitializeCriticalSection
msi
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
user32
GetWindowTextA
IsDialogMessageA
IsWindow
wsprintfW
GetWindowLongW
PostMessageW
SetCursorPos
GetWindowRect
DispatchMessageA
SetFocus
PeekMessageW
LoadCursorW
IsZoomed
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE