Static task
static1
Behavioral task
behavioral1
Sample
91bc3bb441b20bb24b32b5feca2a0e189336edc0f4c3f9e8cc0f78be56d89cba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91bc3bb441b20bb24b32b5feca2a0e189336edc0f4c3f9e8cc0f78be56d89cba.exe
Resource
win10v2004-20220812-en
General
-
Target
91bc3bb441b20bb24b32b5feca2a0e189336edc0f4c3f9e8cc0f78be56d89cba
-
Size
301KB
-
MD5
416ab1d448ad98be2311619291c53790
-
SHA1
25ee55c10e16b28a28e33432247e1f0eb3df8dda
-
SHA256
91bc3bb441b20bb24b32b5feca2a0e189336edc0f4c3f9e8cc0f78be56d89cba
-
SHA512
57411b78a716f43ad234634c69cb9b1a724c80a94bda009bdfe5a15a8f281e4da762ba57dfddd0faca91d464671ffd4817eec5961e6121774e8801edaab4f11d
-
SSDEEP
6144:/lsJzOLj4WbnPiVvnA3g80h9xY6tY/PXqMf2hQLo:/4kdOxnOg8P6t6qr2o
Malware Config
Signatures
Files
-
91bc3bb441b20bb24b32b5feca2a0e189336edc0f4c3f9e8cc0f78be56d89cba.exe windows x86
22b824ff40701dbeb553bace4d0fa183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResetEvent
GetStdHandle
WriteFile
DeleteFileA
GetLocaleInfoA
SetLocalTime
GetFileAttributesA
CreateMailslotA
HeapSize
GetModuleHandleA
RemoveDirectoryA
IsBadWritePtr
GetCommandLineA
VirtualProtect
CancelIo
GetProcessHeap
ReleaseMutex
MapViewOfFile
CreateDirectoryA
GetDriveTypeW
SetLastError
user32
LoadImageA
GetCaretPos
GetWindowTextW
PeekMessageA
GetCapture
wsprintfA
SetCursor
GetWindowLongW
SetFocus
DispatchMessageA
LoadCursorA
PostMessageW
DestroyMenu
filemgmt
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ