Static task
static1
Behavioral task
behavioral1
Sample
123666840d19d2e268f05912ed12b3fc5bc72a692a6f856c112d2f1290a39240.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
123666840d19d2e268f05912ed12b3fc5bc72a692a6f856c112d2f1290a39240.exe
Resource
win10v2004-20220901-en
General
-
Target
123666840d19d2e268f05912ed12b3fc5bc72a692a6f856c112d2f1290a39240
-
Size
334KB
-
MD5
a08d69fb2666ead71432c1afccbeac10
-
SHA1
e746bbb80f061caf581234669e34fd285b02edf9
-
SHA256
123666840d19d2e268f05912ed12b3fc5bc72a692a6f856c112d2f1290a39240
-
SHA512
40866a79c5c5ea961a1b7131b61b4d79ddd3d5c0af7a3ac41d7f70ba93def537feb819328619e47c2e8ac6dee96bdd3428e93cdcb895b5031ccccbddbad8956d
-
SSDEEP
6144:ff+g6T1Wov1l2cuOuKlvo/Pf987546gRFnF3GRBfiy+snpw:H+Vr2rhCgP987a5ndCB5npw
Malware Config
Signatures
Files
-
123666840d19d2e268f05912ed12b3fc5bc72a692a6f856c112d2f1290a39240.exe windows x86
eec0fe1f44c94ee88b95df886437c63f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
GetWindowRect
kernel32
CreateFileA
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FormatMessageA
FindClose
GetFileSize
FindNextFileA
DeleteFileA
CloseHandle
GetACP
GetCPInfo
GetCurrentThreadId
GetFileType
GetCurrentProcess
GetCurrentProcessId
gdi32
CreateFontIndirectA
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
Sections
.text Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ