Static task
static1
Behavioral task
behavioral1
Sample
92ad88533a7546afce24574fb94fd15957de5f0f571698180ca817c3c8e2f8c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92ad88533a7546afce24574fb94fd15957de5f0f571698180ca817c3c8e2f8c5.exe
Resource
win10v2004-20220812-en
General
-
Target
92ad88533a7546afce24574fb94fd15957de5f0f571698180ca817c3c8e2f8c5
-
Size
796KB
-
MD5
817fa5395df1f1abbc4d400c983e2bd0
-
SHA1
ba59942e1f5585316eec9da46702a7911a13f3ce
-
SHA256
92ad88533a7546afce24574fb94fd15957de5f0f571698180ca817c3c8e2f8c5
-
SHA512
2e9f8e5783a6a653e7cb0c276de5732944fd3b4827aed1a91bc329dc6886e8d401f662accae179edd8ae44be259f60b4440827e8fff69afd3752d8b65e48581c
-
SSDEEP
24576:gWHEY6sH5+Oo4Jb7a244FLd8Cir6MOfa1Yj:gCEOH5+D45X4kpA6Pa1
Malware Config
Signatures
Files
-
92ad88533a7546afce24574fb94fd15957de5f0f571698180ca817c3c8e2f8c5.exe windows x86
374add4e78a8c4a4f172d98e346bff18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryA
VirtualProtect
SetLastError
GetExitCodeThread
FindClose
IsValidCodePage
GetFileAttributesA
GetLocaleInfoA
GetStdHandle
GetModuleHandleA
GetDriveTypeW
IsBadWritePtr
ResetEvent
RemoveDirectoryA
CancelIo
HeapSize
GetCommandLineA
FindResourceA
GetProcessHeap
MapViewOfFile
CreateMailslotW
user32
IsDialogMessageA
DestroyMenu
GetWindowLongW
SetCursor
SetFocus
DispatchMessageA
PostMessageW
LoadImageW
PeekMessageA
GetCapture
LoadCursorA
wsprintfA
GetWindowTextW
ipsmsnap
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ