Static task
static1
Behavioral task
behavioral1
Sample
41029bac4489ea28b3e5483c6532a2620222f17872c801d7b350c9a116446222.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
41029bac4489ea28b3e5483c6532a2620222f17872c801d7b350c9a116446222.exe
Resource
win10v2004-20220901-en
General
-
Target
41029bac4489ea28b3e5483c6532a2620222f17872c801d7b350c9a116446222
-
Size
823KB
-
MD5
02c833b81165157e6e24e6d9c2473f70
-
SHA1
b298522b3ff341cc4f437e2820eb5cb4e19f36bc
-
SHA256
41029bac4489ea28b3e5483c6532a2620222f17872c801d7b350c9a116446222
-
SHA512
c21d72c17d42911d7ffde67ef559091a92f727caf3c92810bece163f2f62f0a65966003b7d100f69992c3eceb5debc932141015e25210a7bdbde793348471f92
-
SSDEEP
24576:qQjiYirVYdBI65/AMj7eniRsJnKgmc5hi4:qifGGdBPQiRYZvi4
Malware Config
Signatures
Files
-
41029bac4489ea28b3e5483c6532a2620222f17872c801d7b350c9a116446222.exe windows x86
83804f1d24f4f483cc9f45829bc1c315
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlCreateActivationContext
RtlLeaveCriticalSection
NtTestAlert
ws2_32
socket
advapi32
AccessCheck
user32
GetClipboardSequenceNumber
GetCapture
Sections
.text Size: 814KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE