Static task
static1
Behavioral task
behavioral1
Sample
27e8209913d8e521e91e26fbd082e1755a5133b9110e75e7e38fedf751c0dd06.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
27e8209913d8e521e91e26fbd082e1755a5133b9110e75e7e38fedf751c0dd06.exe
Resource
win10v2004-20220901-en
General
-
Target
27e8209913d8e521e91e26fbd082e1755a5133b9110e75e7e38fedf751c0dd06
-
Size
811KB
-
MD5
006e9429d7da898d9e985397bfa44488
-
SHA1
9d2db15a6249ec696f9faa236e6f893cc23d0d34
-
SHA256
27e8209913d8e521e91e26fbd082e1755a5133b9110e75e7e38fedf751c0dd06
-
SHA512
0d0c9bfec24e779cc8fc85aaa4071241838a8605d721bfd629be7e1281359334e689afb2c7c30b855faeb70b85a3f5d0dc5231fc21a9c596b8a6556bc0289797
-
SSDEEP
12288:T5hr3jeIhGsimM/Gy3MtAVxpT6t478akBrpPdqrVeHX3XB8giM99zLF1fj:T5hr3lhjpT7sp2478bx/AGxrx9XFB
Malware Config
Signatures
Files
-
27e8209913d8e521e91e26fbd082e1755a5133b9110e75e7e38fedf751c0dd06.exe windows x86
91ada45698393931be5eaf036c4b6140
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
SetEvent
CloseHandle
GetProcessHeap
GetFileSize
CreateFileA
GetFileAttributesW
HeapSize
GetModuleFileNameA
SetLastError
SetLastError
SetLocalTime
GlobalFree
DeleteFileA
WriteConsoleA
LoadLibraryA
CreateSemaphoreW
Sleep
CreateDirectoryW
GetEnvironmentStringsA
VirtualProtect
GetTickCount
lstrlenA
GetStartupInfoA
OpenSemaphoreA
user32
FindWindowA
CallWindowProcW
IsWindow
PeekMessageA
DestroyMenu
DrawTextW
GetWindowLongA
GetSysColor
IsZoomed
GetClassInfoA
SetFocus
DispatchMessageA
DispatchMessageA
wups
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
advapi32
RegCloseKey
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE