Static task
static1
Behavioral task
behavioral1
Sample
f92b0559c2a1825ab1b8ae04c651226592473bd8ae5f3591efc8475a0e0a5dc0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f92b0559c2a1825ab1b8ae04c651226592473bd8ae5f3591efc8475a0e0a5dc0.exe
Resource
win10v2004-20220812-en
General
-
Target
f92b0559c2a1825ab1b8ae04c651226592473bd8ae5f3591efc8475a0e0a5dc0
-
Size
796KB
-
MD5
033688ae0a0afbd76bfcd19b06350c36
-
SHA1
4b1350bb92ca906db9257fa00c8b6fd1c6b7acdf
-
SHA256
f92b0559c2a1825ab1b8ae04c651226592473bd8ae5f3591efc8475a0e0a5dc0
-
SHA512
ea0665059d614dce7db6ac15aa995a502a95195187cb6c42aef16a9589abc270a09ff211a64e3745ea4161db74026a9a9436515a713c96ebbc1c784aa9268188
-
SSDEEP
24576:5YfC54U2jPOxqibnXFOakzc6poCVsdWLwpxWVDrS:Ka5yjKRzXFOamGCVsdfxx
Malware Config
Signatures
Files
-
f92b0559c2a1825ab1b8ae04c651226592473bd8ae5f3591efc8475a0e0a5dc0.exe windows x86
2f736df5b8be03e506127e3c1216d605
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
CreateMailslotW
FindClose
IsValidCodePage
GetCommandLineA
IsBadWritePtr
ResetEvent
VirtualProtect
GetDriveTypeW
MapViewOfFile
GetLocaleInfoA
GetStdHandle
HeapSize
GetModuleHandleA
GetExitCodeThread
CancelIo
CreateDirectoryA
FindResourceA
GetProcessHeap
RemoveDirectoryA
SetLastError
user32
DispatchMessageA
LoadImageW
PostMessageW
LoadCursorA
GetWindowTextW
IsDialogMessageA
DestroyMenu
SetCursor
GetWindowLongW
PeekMessageA
wsprintfA
SetFocus
GetCapture
ipsmsnap
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ