Static task
static1
Behavioral task
behavioral1
Sample
1f59f2f234ff8c8107c8117518f7bbcdbc1e9f686cfd86873f8044a24f0fb6b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f59f2f234ff8c8107c8117518f7bbcdbc1e9f686cfd86873f8044a24f0fb6b8.exe
Resource
win10v2004-20220812-en
General
-
Target
1f59f2f234ff8c8107c8117518f7bbcdbc1e9f686cfd86873f8044a24f0fb6b8
-
Size
796KB
-
MD5
0058e323088070b438182b2554041df2
-
SHA1
93eb04784407ee4b5ab484f381019b3067091965
-
SHA256
1f59f2f234ff8c8107c8117518f7bbcdbc1e9f686cfd86873f8044a24f0fb6b8
-
SHA512
3d74fbba7a3a9093d6ae99fa4176fc65a5725ce60f39c36835d9ce5118e683bdd96052adda54df6ce9af7da7f1801dff8260864bf38a52fbf185f54921e9d705
-
SSDEEP
24576:glzZ2Gt9dIHNJM2DCyvkHOfmir55Hzr7:mZ2jNJM2v9fX5TX
Malware Config
Signatures
Files
-
1f59f2f234ff8c8107c8117518f7bbcdbc1e9f686cfd86873f8044a24f0fb6b8.exe windows x86
c3471b15681201dbfed0d808baae71f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapSize
CreateMailslotA
ReadConsoleW
RemoveDirectoryA
GetProcessHeap
IsBadWritePtr
CreateDirectoryA
GetLocaleInfoA
SetLocalTime
VirtualProtect
CancelIo
WriteFile
GetDriveTypeW
GetStdHandle
ResetEvent
GetCommandLineA
GetFileAttributesA
ReleaseMutex
SetLastError
DeleteFileA
GetModuleHandleA
user32
GetCaretPos
PostMessageA
DrawIcon
GetWindowTextW
LoadCursorA
GetWindowLongW
DispatchMessageA
SetFocus
wsprintfA
PeekMessageA
SetCursor
DestroyMenu
GetCapture
filemgmt
DllUnregisterServer
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ