Static task
static1
Behavioral task
behavioral1
Sample
0c56dbfc244a23d5020c4624b4526752b7fb4d50fc70095fcccac148b45a8df2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c56dbfc244a23d5020c4624b4526752b7fb4d50fc70095fcccac148b45a8df2.exe
Resource
win10v2004-20220812-en
General
-
Target
0c56dbfc244a23d5020c4624b4526752b7fb4d50fc70095fcccac148b45a8df2
-
Size
637KB
-
MD5
703692f22df790196ede20fcea1b0e42
-
SHA1
a3d3b538cbf6dbe222979fe33ed2c27727d503ff
-
SHA256
0c56dbfc244a23d5020c4624b4526752b7fb4d50fc70095fcccac148b45a8df2
-
SHA512
0bf1da449ae8d4a51b687c142ec24672550de515ad12394ffcb609fc597ab1144ce555199bbbb561516c1fcf831af87022501a5bb03c80153642983a2c9801ee
-
SSDEEP
12288:1Di8qTUQ9r0wR2M2cx/QdsKmXvrgvzb17nRDoJ:1H0UQdx2Fcy+K0jwNLRD+
Malware Config
Signatures
Files
-
0c56dbfc244a23d5020c4624b4526752b7fb4d50fc70095fcccac148b45a8df2.exe windows x86
4f0c2cea5146b9ca5f7acc33513a36a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
VirtualProtect
GetCurrentProcessId
InterlockedExchange
ResumeThread
GetTimeFormatA
HeapDestroy
LoadLibraryA
GetUserDefaultLCID
PeekConsoleInputA
GetModuleHandleA
GlobalMemoryStatus
GetCommandLineA
GlobalSize
GetOEMCP
HeapCreate
GetTapeStatus
IsDebuggerPresent
GetACP
FreeConsole
GetSystemTime
user32
FrameRect
GetDC
DragDetect
AnyPopup
FillRect
GetTitleBarInfo
GetParent
BeginPaint
GetWindow
GetFocus
EndPaint
GetClassNameA
SetForegroundWindow
wsprintfA
DrawTextA
ShowWindow
ReleaseDC
CreateIcon
GetCursorPos
ntshrui
IsPathSharedA
GetNetResourceFromLocalPathA
IsFolderPrivateForUser
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
msutb
GetPopupTipbar
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ