Static task
static1
Behavioral task
behavioral1
Sample
2f2b57173b42afc60e965e39dd75edeac0eb0523daf352b60fa1521629d14feb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f2b57173b42afc60e965e39dd75edeac0eb0523daf352b60fa1521629d14feb.exe
Resource
win10v2004-20220812-en
General
-
Target
2f2b57173b42afc60e965e39dd75edeac0eb0523daf352b60fa1521629d14feb
-
Size
147KB
-
MD5
0c109620ce9cc302609f1c10beba2d9e
-
SHA1
65f42179d2317ca3850ea6ee1a6ac398d694eb2a
-
SHA256
2f2b57173b42afc60e965e39dd75edeac0eb0523daf352b60fa1521629d14feb
-
SHA512
ac12f2ab211ce1610a03a4fc79637d1957c516187140bd440aae855d5eb27aee6aa787850b81f8dc8cbda2124bbb25020f1a9d5f17cd37451a4f1f98c75cdf5c
-
SSDEEP
3072:MUjILs+1f6leADSKgfPnN9mAcvds/usmoP750ZDp1SyubR6B96vEt:tjMIlxqvNAAcvdsRmZfSyO4n68t
Malware Config
Signatures
Files
-
2f2b57173b42afc60e965e39dd75edeac0eb0523daf352b60fa1521629d14feb.exe windows x86
6078c3e1376cac67cfd1bc9a37aae84f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
CreateThread
GlobalAlloc
LoadLibraryA
ResetEvent
WriteFile
LoadResource
GetDateFormatA
GetCurrentThreadId
SetEvent
WideCharToMultiByte
GetCurrentThread
ExitThread
GetCommandLineA
VirtualAlloc
GetModuleFileNameA
user32
CharToOemA
DrawEdge
GetIconInfo
ShowScrollBar
GetDC
EnableWindow
GetScrollInfo
GetScrollRange
CallWindowProcA
CheckMenuItem
ShowWindow
DefWindowProcA
GetForegroundWindow
DrawMenuBar
FindWindowA
CreatePopupMenu
CharLowerBuffA
GetKeyState
comdlg32
GetOpenFileNameA
msvcrt
calloc
memmove
swprintf
wcschr
wcstol
clock
sqrt
shell32
SHGetDiskFreeSpaceA
DragQueryFileA
Sections
.edata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 512B - Virtual size: 415B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ