Static task
static1
Behavioral task
behavioral1
Sample
19b596f3ef4abfa281d6f73025bc929725b8a1f1486e579aff4581735f1c9636.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19b596f3ef4abfa281d6f73025bc929725b8a1f1486e579aff4581735f1c9636.exe
Resource
win10v2004-20220901-en
General
-
Target
19b596f3ef4abfa281d6f73025bc929725b8a1f1486e579aff4581735f1c9636
-
Size
301KB
-
MD5
5446887f60da68760279b2d19fc21b50
-
SHA1
92b76cf666cebe6f5575d24365ef1a89e0e25719
-
SHA256
19b596f3ef4abfa281d6f73025bc929725b8a1f1486e579aff4581735f1c9636
-
SHA512
5ed87c4c85434e486f0f32e4a445cb2ee4de582a8d7b78e8dae27d889d13f61f1921e3f7f6b8d5b501bda6b8d9df89aecd369e738f5231de192b9d5b4e04f892
-
SSDEEP
6144:m5CICd1fRl8wtveaIWmSDSmlvbUsiFs4ivG+Ys6OKdyUUnD:msfR+WvGWt2Ig3/mG+Y44yUm
Malware Config
Signatures
Files
-
19b596f3ef4abfa281d6f73025bc929725b8a1f1486e579aff4581735f1c9636.exe windows x86
1d5c5e89728b15a65e614dce27819a8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
GetProcessHeap
GetDriveTypeW
CreateDirectoryA
IsBadWritePtr
GetLocaleInfoA
RemoveDirectoryA
SetLocalTime
ReleaseMutex
HeapSize
GetStdHandle
ReadConsoleW
CreateMailslotA
GetCommandLineA
ResetEvent
DeleteFileA
WriteFile
SetLastError
VirtualProtect
CancelIo
GetModuleHandleA
user32
GetWindowTextW
DestroyMenu
PostMessageW
GetWindowLongW
DrawIcon
SetCursor
LoadCursorA
GetCapture
SetFocus
wsprintfA
DispatchMessageA
PeekMessageA
GetCaretPos
filemgmt
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ