Static task
static1
Behavioral task
behavioral1
Sample
0ce20b01dda5a969d012a199e897898f04688941547b78dc735ad371f11911bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ce20b01dda5a969d012a199e897898f04688941547b78dc735ad371f11911bf.exe
Resource
win10v2004-20220812-en
General
-
Target
0ce20b01dda5a969d012a199e897898f04688941547b78dc735ad371f11911bf
-
Size
126KB
-
MD5
005118329e0744e0228bd53abff8e35a
-
SHA1
a51e3c0ae4de0983821bd80926b7ff566da8aaad
-
SHA256
0ce20b01dda5a969d012a199e897898f04688941547b78dc735ad371f11911bf
-
SHA512
a2b8c6f7cac4abd8e8a330ef0fd1116b43d482e64ea31ed4a460ab3be45c3becc4bd6ca5b6d96d290bc437bebf8d40d3b6f40e2d8b2dd7444a2f84c731c2dece
-
SSDEEP
3072:k6aIg8Rj/TD1cVdcmhthC1LDLO9gkHnCCSpLWua5Wn6EF9:xaP8R3D1YNTeXLO9BHxSAua5wD
Malware Config
Signatures
Files
-
0ce20b01dda5a969d012a199e897898f04688941547b78dc735ad371f11911bf.exe windows x86
a98472286634741b0302ec3355a7d06d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidCodePage
GetPrivateProfileSectionA
GetVersionExA
GetCurrentProcess
LocalFlags
CreateDirectoryW
GetLocaleInfoW
GetFileAttributesW
TlsGetValue
FindClose
GetModuleHandleA
VirtualProtectEx
CreateEventA
SetLastError
RemoveDirectoryW
GetStringTypeA
HeapFree
GetExitCodeThread
GetCurrentThread
GlobalLock
GetFileAttributesW
user32
SetFocus
IsDialogMessageA
PeekMessageW
SetCursorPos
GetWindowLongW
PostMessageW
GetWindowTextW
LoadCursorA
DefDlgProcA
DispatchMessageA
SetCursor
IsWindow
wsprintfW
msdtcprx
DTC_XaOpen
DTC_XaCommit
DTC_XaStart
DTC_XaEnd
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE