Static task
static1
Behavioral task
behavioral1
Sample
f1c6858856640ea1e159d3d71932bc0ed6f413e27cfb5082b8f231bc972e9d64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1c6858856640ea1e159d3d71932bc0ed6f413e27cfb5082b8f231bc972e9d64.exe
Resource
win10v2004-20220812-en
General
-
Target
f1c6858856640ea1e159d3d71932bc0ed6f413e27cfb5082b8f231bc972e9d64
-
Size
301KB
-
MD5
83ce43efec5924cdd4d71a696708c530
-
SHA1
40fef8775d04346be6fcd00c87158e975cbdb6ea
-
SHA256
f1c6858856640ea1e159d3d71932bc0ed6f413e27cfb5082b8f231bc972e9d64
-
SHA512
2b47b657c7ead0abb2a56255c3cd2e7c0ce85ef8f30f899425f1ae172120a33871e16ba1d5fb193acbc4a6cdb4dadbcd74a90631805cf3c75c92a7a104ce2f51
-
SSDEEP
6144:rQ7Su0Im2aCffBKXuNVk5EGZeYc9xAa6xp0NjnOut8FR/ou:c/01rI+uPEELYkv8
Malware Config
Signatures
Files
-
f1c6858856640ea1e159d3d71932bc0ed6f413e27cfb5082b8f231bc972e9d64.exe windows x86
8725a72f70b7892e48b5050ca7724e76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetLastError
HeapSize
GetLocaleInfoA
RemoveDirectoryA
CreateDirectoryA
GetProcessHeap
ResetEvent
DeleteFileA
GetModuleHandleA
IsBadWritePtr
VirtualProtect
GetStdHandle
GetCommandLineA
CreateMailslotA
ReleaseMutex
GetFileAttributesA
SetLocalTime
ReadConsoleW
GetDriveTypeW
WriteFile
CancelIo
user32
DestroyMenu
PostMessageW
GetCaretPos
DrawIcon
SetFocus
DispatchMessageA
wsprintfA
GetWindowLongW
SetCursor
GetWindowTextW
LoadCursorA
GetCapture
PeekMessageA
filemgmt
DllUnregisterServer
DllRegisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ