Static task
static1
Behavioral task
behavioral1
Sample
f0b4229e63445dba142ff2d4f88b5b0aad336fa0980d827386df61aae8f76677.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0b4229e63445dba142ff2d4f88b5b0aad336fa0980d827386df61aae8f76677.exe
Resource
win10v2004-20220901-en
General
-
Target
f0b4229e63445dba142ff2d4f88b5b0aad336fa0980d827386df61aae8f76677
-
Size
797KB
-
MD5
9637d1d783d6629e70f5bb498841ec57
-
SHA1
166761d0ab919e51a8fa0ea1f0fac22a00e68711
-
SHA256
f0b4229e63445dba142ff2d4f88b5b0aad336fa0980d827386df61aae8f76677
-
SHA512
3832068abd4b399a96cdb3e7e4ffbca505edcce7367a4d82a3ea3c2453582b4345248205be320fcf0640b6ad3130d1a49db9fa36a2e9b81ad4fa0a87e3f102fa
-
SSDEEP
24576:1e2vTsw3Y1PVk4BfoEfLfXiEId6MbQo60:o2a9k4Bfo+oMZ
Malware Config
Signatures
Files
-
f0b4229e63445dba142ff2d4f88b5b0aad336fa0980d827386df61aae8f76677.exe windows x86
9faac298a5d817354e74e2a6f55a39c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
GetCommandLineA
CreateMailslotA
GetModuleHandleA
IsBadWritePtr
WriteFile
RemoveDirectoryA
MapViewOfFile
GetProcessHeap
VirtualProtect
GetLocaleInfoA
SetLastError
CancelIo
CreateDirectoryA
ResetEvent
DeleteFileA
ReleaseMutex
GetFileAttributesA
HeapSize
SetLocalTime
GetDriveTypeW
user32
PostMessageW
GetWindowTextW
DestroyMenu
LoadCursorA
SetCursor
PeekMessageA
GetWindowLongW
GetCaretPos
SetFocus
GetCapture
DispatchMessageA
LoadImageA
wsprintfA
filemgmt
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 790KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ