Static task
static1
Behavioral task
behavioral1
Sample
41f0150e723dfdda4652405a80ddba4a0d6d4ce74d21b454cbfba3ad36cd9211.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41f0150e723dfdda4652405a80ddba4a0d6d4ce74d21b454cbfba3ad36cd9211.exe
Resource
win10v2004-20220812-en
General
-
Target
41f0150e723dfdda4652405a80ddba4a0d6d4ce74d21b454cbfba3ad36cd9211
-
Size
632KB
-
MD5
851b471afd29486abede1a4b0cd8c8a0
-
SHA1
adbc59c06497bc330f7654d040ce6ce26c1bfc5b
-
SHA256
41f0150e723dfdda4652405a80ddba4a0d6d4ce74d21b454cbfba3ad36cd9211
-
SHA512
e78ba0f0f36edd65f5334f2d69e902efef04521fe0631a86f889fb85ef0c03c144db5675b79eb0a6b8d8e733356d26fd55e1de3a91772883b804d7bdb21f4172
-
SSDEEP
12288:SjbQUvhNRpYfgEz6qx+6eeNj1zLT1bhUxNL3wCTFpIKGAMrCZEu2d:SnQcl2oSx+6xlNBloWkfkAMWrO
Malware Config
Signatures
Files
-
41f0150e723dfdda4652405a80ddba4a0d6d4ce74d21b454cbfba3ad36cd9211.exe windows x86
d8e8ca812ffd18b3920374472d0c48c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
MenuHelp
CreateToolbar
DrawStatusText
ImageList_Add
ImageList_AddIcon
DrawStatusTextA
winmm
PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW
kernel32
HeapCreate
GetEnvironmentVariableW
WriteFile
ExitThread
_lopen
GetSystemDirectoryA
GetACP
ReadFile
OpenProcess
DuplicateHandle
Beep
CreateThread
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
SetEnvironmentVariableA
ConvertDefaultLocale
GetTempPathW
HeapSize
GetTempPathA
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
MoveFileA
HeapDestroy
GetFileSize
VirtualProtect
LCMapStringW
LCMapStringA
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 624KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE