Static task
static1
Behavioral task
behavioral1
Sample
f417a279d89769733fc09829fc8f9da7fd9dfe9f5cecfd2799a434740e26c08f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f417a279d89769733fc09829fc8f9da7fd9dfe9f5cecfd2799a434740e26c08f.exe
Resource
win10v2004-20220812-en
General
-
Target
f417a279d89769733fc09829fc8f9da7fd9dfe9f5cecfd2799a434740e26c08f
-
Size
301KB
-
MD5
8046c6465969c8db44eac0b2b142aac0
-
SHA1
5abf1570d9bbfb72c542c62ff11273de377dc34e
-
SHA256
f417a279d89769733fc09829fc8f9da7fd9dfe9f5cecfd2799a434740e26c08f
-
SHA512
68fbc1b02ab3b6bbd5fbfa2dd9a278e66700615d69f679092f9ff518f1b9cb01dd02a219e86a8e1d89e011ca696ec28a994c3bf7a56ee3713aa4ee4c40f567dd
-
SSDEEP
6144:ec1NBkf5f9bi2Fdf58QGHNxKM//dpRAUMGGM2xfOTyd8Z4Omuhg:PEf5dHf+QOxLZAWGM2xfOJZpmuhg
Malware Config
Signatures
Files
-
f417a279d89769733fc09829fc8f9da7fd9dfe9f5cecfd2799a434740e26c08f.exe windows x86
6c8dbfecfabad252a7cd8adc7a182ac6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
GetStdHandle
GetModuleHandleA
GetCommandLineA
ReadConsoleW
HeapSize
ReleaseMutex
CreateDirectoryA
GetLocaleInfoA
CreateMailslotA
RemoveDirectoryA
SetLocalTime
DeleteFileA
CancelIo
GetDriveTypeW
VirtualProtect
GetProcessHeap
GetFileAttributesA
WriteFile
ResetEvent
SetLastError
user32
SetCursor
PostMessageA
DestroyMenu
SetFocus
GetCapture
DispatchMessageA
LoadCursorA
GetWindowTextW
PeekMessageA
GetCaretPos
GetWindowLongW
wsprintfA
DrawIcon
els
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ