Static task
static1
Behavioral task
behavioral1
Sample
7f1c09f1cfc07bd2755cf7be8e88120528205221232189dc2249459905742681.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7f1c09f1cfc07bd2755cf7be8e88120528205221232189dc2249459905742681.exe
Resource
win10v2004-20220901-en
General
-
Target
7f1c09f1cfc07bd2755cf7be8e88120528205221232189dc2249459905742681
-
Size
311KB
-
MD5
4dbbcf167379ecc301f6a10912ad01a0
-
SHA1
1c4ccb12af808b798f1514e358e7bcff8c1452f7
-
SHA256
7f1c09f1cfc07bd2755cf7be8e88120528205221232189dc2249459905742681
-
SHA512
7adef2748f22f9d8e91024da5cac444f468b4005a1412b29310843f2480f1f935d3963f9626975adbfdcf8df95d54ecf51984d00993d568f16a6d951adf8b3d8
-
SSDEEP
6144:VwLHa6yB1cTcR9gNJFqYheudqUoogTbn2MlxRJKJuNYYYbD:Vw79yB6To9oJFqY4Gq9x2AxSMAbD
Malware Config
Signatures
Files
-
7f1c09f1cfc07bd2755cf7be8e88120528205221232189dc2249459905742681.exe windows x86
b3fd18ae858d319fbacbceb060cc8e30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyA
SetFileTime
LeaveCriticalSection
GetLastError
GetStartupInfoW
GetLocalTime
GetFileSize
lstrcatA
FindResourceA
GetModuleHandleW
FormatMessageW
InitializeCriticalSection
CloseHandle
CreateMutexW
ReadFile
SetFileAttributesW
SetFileTime
IsBadWritePtr
SetFileTime
GetModuleHandleA
HeapCreate
msi
MsiCloseHandle
MsiCloseAllHandles
MsiCreateRecord
MsiAdvertiseProductA
user32
PostMessageW
SetFocus
DispatchMessageA
GetWindowLongW
wsprintfW
IsZoomed
LoadCursorW
SetCursorPos
GetWindowRect
GetWindowTextA
IsDialogMessageA
IsWindow
PeekMessageW
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE