Static task
static1
Behavioral task
behavioral1
Sample
034a55e880eed588edd5204b2066943c1c31d3d1e08b5c88084e20b1888667cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
034a55e880eed588edd5204b2066943c1c31d3d1e08b5c88084e20b1888667cf.exe
Resource
win10v2004-20220812-en
General
-
Target
034a55e880eed588edd5204b2066943c1c31d3d1e08b5c88084e20b1888667cf
-
Size
312KB
-
MD5
0c0cf58603e7344382ce090f16fc872f
-
SHA1
32d1c6887b65207e0ead6b28dbdf0156e33f8b01
-
SHA256
034a55e880eed588edd5204b2066943c1c31d3d1e08b5c88084e20b1888667cf
-
SHA512
30ab156c24b5a670dc871f7065e3ac7e162fb6498e288e1c4a62ced791b32db4c05a45efec807da1a10aa30fa80973da9e36c1a9d4856ef36f1d85cff5783ad9
-
SSDEEP
6144:u4WB6ycJpBHIoReOyS4nUrqmiuFFDZhyLl13OUz/8m10h:u4tRsnS4UZiMJZ4BYUZmh
Malware Config
Signatures
Files
-
034a55e880eed588edd5204b2066943c1c31d3d1e08b5c88084e20b1888667cf.exe windows x86
374de482cdab3072d59a0a68b7b01a2e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCompressedFileSizeA
GetCurrentProcessId
HeapCreate
GetCurrentThread
GetCurrentProcess
GetStdHandle
GetSystemDirectoryA
SetEvent
GetLocaleInfoA
GetCommandLineA
OpenSemaphoreA
GetACP
GlobalFree
WriteConsoleA
VirtualProtect
InterlockedExchange
FlushFileBuffers
IsDebuggerPresent
FreeEnvironmentStringsA
RaiseException
user32
EndPaint
GetWindow
ShowWindow
ReleaseDC
FrameRect
GetFocus
BeginPaint
GetClassNameA
wsprintfA
IsIconic
SetActiveWindow
GetCursorPos
GetParent
SetForegroundWindow
GetDlgItem
ValidateRgn
DrawTextA
GetWindowTextLengthA
FillRect
linkinfo
ResolveLinkInfoA
DestroyLinkInfo
IsValidLinkInfo
GetCanonicalPathInfoA
GetLinkInfoData
rtutils
LogEventA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ