Static task
static1
Behavioral task
behavioral1
Sample
ba358718cd935243f7763881c506801c981274c36625be6ec18fb83ca7efc32a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba358718cd935243f7763881c506801c981274c36625be6ec18fb83ca7efc32a.exe
Resource
win10v2004-20220812-en
General
-
Target
ba358718cd935243f7763881c506801c981274c36625be6ec18fb83ca7efc32a
-
Size
966KB
-
MD5
72f47432dbfcbf1e38db4b5acee3c6a0
-
SHA1
399420e8d24f4dd38ee85151ce8ff10df8559d88
-
SHA256
ba358718cd935243f7763881c506801c981274c36625be6ec18fb83ca7efc32a
-
SHA512
cca053447343eeb0786304d0920a13118878f7a22f96cbfaed7d4618cfbac924490c8bd582608c4e75e864596e769a11564d2d0c948548d870acda6544affa32
-
SSDEEP
24576:ed3wkeaV9tMCdq8VbXwC8JCjniZTev++QG5yECW:ed3SaxXq8V7w+nhvb7z
Malware Config
Signatures
Files
-
ba358718cd935243f7763881c506801c981274c36625be6ec18fb83ca7efc32a.exe windows x86
6d18b5bc22d91672ef27d736afa5b488
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imagehlp
ImageNtHeader
ImageRvaToVa
ImageGetDigestStream
ImageDirectoryEntryToData
kernel32
FreeLibrary
UpdateResourceW
ReadFile
FindClose
FindNextFileW
GetACP
GetModuleHandleA
ExitProcess
CloseHandle
GetFileInformationByHandle
EndUpdateResourceW
RaiseException
GetFullPathNameW
BeginUpdateResourceW
GetOEMCP
LoadLibraryExW
InterlockedExchange
LocalFree
GlobalFree
GetVersionExW
LoadLibraryExA
GetThreadLocale
GlobalAlloc
user32
CharNextA
CharNextW
wsprintfW
msvfw32
DrawDibProfileDisplay
ICRemove
ole32
CoInitialize
StringFromCLSID
CoUninitialize
CLSIDFromString
CoTaskMemFree
CoCreateInstance
StringFromIID
Sections
.text Size: 566KB - Virtual size: 565KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ