Static task
static1
Behavioral task
behavioral1
Sample
1a2f98c756c50e3de25b4f07816493eaad4ca7d0268664779f0e962d58171f11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1a2f98c756c50e3de25b4f07816493eaad4ca7d0268664779f0e962d58171f11.exe
Resource
win10v2004-20220901-en
General
-
Target
1a2f98c756c50e3de25b4f07816493eaad4ca7d0268664779f0e962d58171f11
-
Size
58KB
-
MD5
44f52f4b69714ac7d743696affcd86f0
-
SHA1
39c17306d5c066dc4e40388b70a832cf15adc971
-
SHA256
1a2f98c756c50e3de25b4f07816493eaad4ca7d0268664779f0e962d58171f11
-
SHA512
dc83df399556fb453230cced3eede3fa1159ff2f6aff554f0145e08791256f08a9a9adfa36c2c527a337e8109de6643a007e637ff31bb9c4b1d9cd78b6199768
-
SSDEEP
1536:CwChwgS287cr8uAYPsFMAEZGID6NJgI64947Px7D:dcwID8uAImMAEZ94Jj64947x3
Malware Config
Signatures
Files
-
1a2f98c756c50e3de25b4f07816493eaad4ca7d0268664779f0e962d58171f11.exe windows x86
5fc39052e802bac3e159439ecccab90d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
MenuHelp
CreateToolbar
CreateStatusWindowA
DrawStatusTextA
DrawInsert
kernel32
HeapCreate
InterlockedDecrement
WriteFile
ExitThread
CreateFileA
GetSystemDirectoryW
GetACP
ReadFile
OpenProcess
CloseHandle
HeapCreate
InterlockedDecrement
WriteFile
ExitThread
CreateFileA
GetSystemDirectoryW
GetACP
ReadFile
OpenProcess
CloseHandle
crypt32
CryptDecryptMessage
mapi32
MAPILogonEx
MAPIFreeBuffer
MAPIAllocateBuffer
MAPIAllocateMore
MAPIAdminProfiles
MAPIInitialize
OpenTnefStream
OpenStreamOnFile
RTFSync
fde
DllGetClassObject
Sections
.text Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE