Static task
static1
Behavioral task
behavioral1
Sample
29696f1aec219609a82898937cb8e9b25961b5a1f3245e3c8163906d1f943d45.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29696f1aec219609a82898937cb8e9b25961b5a1f3245e3c8163906d1f943d45.exe
Resource
win10v2004-20220812-en
General
-
Target
29696f1aec219609a82898937cb8e9b25961b5a1f3245e3c8163906d1f943d45
-
Size
305KB
-
MD5
4b5cc3a1e5f613f8bb0613beea423750
-
SHA1
6270e596ab14fd0668f11538a23b7ec20f8b1415
-
SHA256
29696f1aec219609a82898937cb8e9b25961b5a1f3245e3c8163906d1f943d45
-
SHA512
541f5016d15bd1d570e836f2e414c82dd0f45a0060d569c36c6a88efc19a03229b00ed4685847d12852f99b56735bfc228f79f00ffbc62550d3e7ae820353b66
-
SSDEEP
6144:cjQUtRaU6HnweDOoSESEBhkIZJnWsOw5r8uDe2m7lF2:DURamQbPBhhznWzurTg7D
Malware Config
Signatures
Files
-
29696f1aec219609a82898937cb8e9b25961b5a1f3245e3c8163906d1f943d45.exe windows x86
5b150da9ca865e562741292195ec8860
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetModuleHandleA
GetFileAttributesW
LocalFlags
SetFilePointer
lstrlenA
GetVersionExA
HeapDestroy
GetModuleFileNameA
CreateFileW
GetCurrentThreadId
GetTickCount
SetEvent
SuspendThread
OpenEventW
GetStdHandle
CreateFileW
LeaveCriticalSection
ResumeThread
IsValidLocale
AddAtomW
InterlockedExchange
CreateDirectoryA
CreateMutexW
GetLocaleInfoA
user32
GetWindowLongA
DestroyMenu
DestroyIcon
SetRect
PeekMessageA
GetWindowLongA
MessageBoxW
DispatchMessageA
IsMenu
wsprintfA
LoadCursorA
IsMenu
GetWindowTextA
dpnet
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
advapi32
IsValidAcl
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE