Static task
static1
Behavioral task
behavioral1
Sample
328bff4b9f4666ff94467d0cd7105e0852e82adcebb311bf2baf24eeba9eabeb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
328bff4b9f4666ff94467d0cd7105e0852e82adcebb311bf2baf24eeba9eabeb.exe
Resource
win10v2004-20220901-en
General
-
Target
328bff4b9f4666ff94467d0cd7105e0852e82adcebb311bf2baf24eeba9eabeb
-
Size
301KB
-
MD5
9012014e2792e2ff17a3feecc415c120
-
SHA1
cb4e7c952780b8535cf98ebd5ec0358cc0076ea9
-
SHA256
328bff4b9f4666ff94467d0cd7105e0852e82adcebb311bf2baf24eeba9eabeb
-
SHA512
9ea80ceeb3ed35010e58534fee89c4aa4462f9b646aaef02ad309855edccc21b887f5c0c522f1df1262e98b05a48c251db223ccf73519bebd763388e9c228abd
-
SSDEEP
6144:ZkvcP+wbqVBX2T3waavuQbGd7Ca++DrkzjWLMBdIjuwl:Zk2Jb0BXs2mQMV+yKaAeu
Malware Config
Signatures
Files
-
328bff4b9f4666ff94467d0cd7105e0852e82adcebb311bf2baf24eeba9eabeb.exe windows x86
74828cbc2f34fca0e223a3729a657536
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
GetStartupInfoA
WriteConsoleW
ReadFile
FormatMessageA
CloseHandle
GetLastError
GetModuleHandleA
HeapCreate
lstrcpyA
IsBadStringPtrW
WriteConsoleW
WriteConsoleW
GetFileTime
GetCurrentDirectoryW
GetFileSize
lstrcpyW
ReleaseMutex
IsValidLocale
SetFileAttributesA
CreateMutexA
msi
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
user32
GetWindowTextA
DispatchMessageA
IsCharLowerA
PeekMessageW
PostMessageW
LoadCursorW
SetFocus
IsZoomed
IsDialogMessageA
GetWindowLongW
wsprintfW
SetCursorPos
IsWindow
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qedit Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE