Static task
static1
Behavioral task
behavioral1
Sample
33bce9895097c1eb90fc97c8d5a58ce33dd7bb3884f1e4477e582875ecbd0ec8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33bce9895097c1eb90fc97c8d5a58ce33dd7bb3884f1e4477e582875ecbd0ec8.exe
Resource
win10v2004-20220812-en
General
-
Target
33bce9895097c1eb90fc97c8d5a58ce33dd7bb3884f1e4477e582875ecbd0ec8
-
Size
800KB
-
MD5
791dcbd3314fe426c08af2fa5be88810
-
SHA1
6e63eed03f7df387d0a6f6508ec794399d2e8b51
-
SHA256
33bce9895097c1eb90fc97c8d5a58ce33dd7bb3884f1e4477e582875ecbd0ec8
-
SHA512
de4524f1b3bd67374397524fef1a59232b73f82afea845ff6f204c97943852642017e8fdec6be5de0a1914428c4aedb63b77d4f35c3059654e0a88f0144a7279
-
SSDEEP
24576:NmKHm0kT6PKW7wEztgYmck7yPicO+y2CQN:E1T6Sgwegak2PicP
Malware Config
Signatures
Files
-
33bce9895097c1eb90fc97c8d5a58ce33dd7bb3884f1e4477e582875ecbd0ec8.exe windows x86
55dda3073547d5dd72a9e152e15bea5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidCodePage
VirtualProtect
IsBadWritePtr
GetLocaleInfoA
GetFileAttributesA
LocalLock
GetCurrentProcess
TlsGetValue
RemoveDirectoryA
GetModuleHandleA
GetExitCodeThread
HeapSize
MapViewOfFile
FindClose
FindResourceA
GetTickCount
GetFileAttributesA
GetDriveTypeW
CreateDirectoryA
GetStringTypeA
SetLastError
user32
GetWindowTextW
GetWindowLongW
LoadCursorA
DispatchMessageA
SetCursor
IsDialogMessageA
PeekMessageW
SetFocus
LoadImageW
wsprintfW
GetCapture
PostMessageW
IsWindow
msaatext
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE