Static task
static1
Behavioral task
behavioral1
Sample
18f962aa4826fb7b5f77b3880cf5d0816c7d1cbdf32643789a877ac02d8f2359.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
18f962aa4826fb7b5f77b3880cf5d0816c7d1cbdf32643789a877ac02d8f2359.exe
Resource
win10v2004-20220901-en
General
-
Target
18f962aa4826fb7b5f77b3880cf5d0816c7d1cbdf32643789a877ac02d8f2359
-
Size
798KB
-
MD5
735f27580f32b9fd1ee90c665bc71b50
-
SHA1
6142e6a24fa8fbd962bc0018d88a75d4e8c0a15f
-
SHA256
18f962aa4826fb7b5f77b3880cf5d0816c7d1cbdf32643789a877ac02d8f2359
-
SHA512
7b570183b50574481f982854bdd686ee28640e88910ab07e5e13a4a43762f5da2267d6863ae22afeb63721c608051bfeb038ce4b6aed1e47b223e938c0ac49e5
-
SSDEEP
12288:QCakNVzqDylpnE3+gqy82UQUlgXw5xUt01nAouOJA6vzTITB+3GVyYV3TstPfclv:b46grVU7Fb31nA6v/ItIG0wTshfyz0
Malware Config
Signatures
Files
-
18f962aa4826fb7b5f77b3880cf5d0816c7d1cbdf32643789a877ac02d8f2359.exe windows x86
2792a8b3544031186ddb3ea512447205
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEvent
ResumeThread
SetFilePointer
GlobalFlags
CreateFileW
GetModuleFileNameA
HeapDestroy
CreateDirectoryA
GetVolumePathNameW
VirtualProtect
IsValidLocale
lstrlenA
CreateFileW
GetModuleHandleA
SuspendThread
CreateMutexA
GetCurrentThreadId
GetTickCount
LeaveCriticalSection
AddAtomA
GetFileAttributesW
PulseEvent
OpenEventW
GetVersionExA
InterlockedExchange
user32
LoadCursorA
DestroyMenu
SetFocus
wsprintfA
GetWindowTextA
PeekMessageA
GetWindowLongA
MessageBoxA
DispatchMessageA
DestroyIcon
GetWindowLongA
IsMenu
SetRect
dplayx
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
DllUnregisterServer
advapi32
IsValidAcl
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE