Static task
static1
Behavioral task
behavioral1
Sample
29d9bd918dee5d9d0c595ae7c416468bb1224b528d728190a3858ba8a3f6d4bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
29d9bd918dee5d9d0c595ae7c416468bb1224b528d728190a3858ba8a3f6d4bc.exe
Resource
win10v2004-20220901-en
General
-
Target
29d9bd918dee5d9d0c595ae7c416468bb1224b528d728190a3858ba8a3f6d4bc
-
Size
120KB
-
MD5
709b04615bb92bb6065f57f9e4ad7a10
-
SHA1
b645844d1639ad90e6b283a59d62bf8fbbad9d53
-
SHA256
29d9bd918dee5d9d0c595ae7c416468bb1224b528d728190a3858ba8a3f6d4bc
-
SHA512
63a15b3a5710e40d13233a3edab72769da427d84c94fa0fa8743d996978b2e9d3587b43e23aa2408fad9fe499b11c1a80e7a0797ccc806e1c86c5b49722ff056
-
SSDEEP
3072:86Y+BtridKv1o/v/4aVes79uE9fQCXwXy6iRC:CdKv10vFVes7V9fbXwXy6p
Malware Config
Signatures
Files
-
29d9bd918dee5d9d0c595ae7c416468bb1224b528d728190a3858ba8a3f6d4bc.exe windows x86
b5f1440f230525039c21d03729620aef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
GetCurrentDirectoryW
lstrcpyA
ReadFile
lstrcatA
CreateMutexW
FindResourceA
InitializeCriticalSection
GetLastError
GetStartupInfoW
HeapCreate
GetLocalTime
LeaveCriticalSection
CloseHandle
GetModuleHandleA
SetFileTime
SetFileTime
IsBadWritePtr
SetFileAttributesW
FormatMessageW
GetFileSize
msi
MsiCloseHandle
MsiCreateRecord
MsiCloseAllHandles
MsiAdvertiseProductA
user32
IsDialogMessageA
PeekMessageW
IsWindow
wsprintfW
LoadCursorW
DispatchMessageA
GetWindowRect
PostMessageW
IsZoomed
SetCursorPos
GetWindowLongW
GetWindowTextA
SetFocus
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE