Static task
static1
Behavioral task
behavioral1
Sample
2dbb2fc6d98bb729aa770cf25a33c693f135b7e460e682933e44c477f734892f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2dbb2fc6d98bb729aa770cf25a33c693f135b7e460e682933e44c477f734892f.exe
Resource
win10v2004-20220812-en
General
-
Target
2dbb2fc6d98bb729aa770cf25a33c693f135b7e460e682933e44c477f734892f
-
Size
300KB
-
MD5
966f3e96340891e75386b7f7d7a027d0
-
SHA1
e4c4f7c6e93034ef3e9b2a7a10e6a772530058a1
-
SHA256
2dbb2fc6d98bb729aa770cf25a33c693f135b7e460e682933e44c477f734892f
-
SHA512
7ad96922f0e547aa2bcb0dca203ce43ddaa54d5d156c7cb9c0b84aa5a0790116997623fdfe7eb9c784496ba14cd4968830d7092ccc6999b8f24b49b1e6871958
-
SSDEEP
6144:hsq6gMzb3d0oa4WAbrevJT8TWzrdZ0++8ny0Q23OdUal2mnOVYgKeaSfO1OS:hVY/qoa4xPHTWzrde++/2kUrmnbRdSW0
Malware Config
Signatures
Files
-
2dbb2fc6d98bb729aa770cf25a33c693f135b7e460e682933e44c477f734892f.exe windows x86
6449188c234a13672fb9cc7ae176e9ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
GetModuleHandleA
ReadConsoleW
SetLocalTime
GetCommandLineA
GetStdHandle
IsBadReadPtr
SuspendThread
CreatePipe
GlobalSize
ResetEvent
CreateDirectoryA
GetPriorityClass
ReleaseMutex
WriteFile
VirtualProtect
GetLocaleInfoA
DeleteFileA
GetFileAttributesA
GetDriveTypeA
GetProcessHeap
user32
GetCaretPos
GetMessageW
LoadCursorA
DestroyMenu
PeekMessageA
DispatchMessageA
GetWindowLongW
SetFocus
wsprintfA
SetCursor
DrawIcon
GetWindowTextW
GetCapture
els
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ