Static task
static1
Behavioral task
behavioral1
Sample
1faf975e668b1f4f797edb390a6e80e8d571c4a41ac7cc3dfb198d2f46384202.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1faf975e668b1f4f797edb390a6e80e8d571c4a41ac7cc3dfb198d2f46384202.exe
Resource
win10v2004-20220901-en
General
-
Target
1faf975e668b1f4f797edb390a6e80e8d571c4a41ac7cc3dfb198d2f46384202
-
Size
775KB
-
MD5
0e559803496facccac671b78939e3fb0
-
SHA1
4c7b21a02c6b490b6a9b7b6204f9c0eb81272800
-
SHA256
1faf975e668b1f4f797edb390a6e80e8d571c4a41ac7cc3dfb198d2f46384202
-
SHA512
0baeff9c92ac9074209918f92f580d7f529a5bfcd96317e0dc57c514469833800c4af65fd4b46e59c5ba1718a0c91814a84e15eb0bd4eb96f90dde134b803b3a
-
SSDEEP
24576:gmEu3moh1jkMnVZHklW08nfGWoxwwwcjngU:NEuWorVnclW3eWawDcEU
Malware Config
Signatures
Files
-
1faf975e668b1f4f797edb390a6e80e8d571c4a41ac7cc3dfb198d2f46384202.exe windows x86
3648d16e7f212d25dc0a7323f38d7006
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
HeapAlloc
FreeEnvironmentStringsW
CopyFileA
CreateDirectoryA
GetPrivateProfileStringA
VirtualAllocEx
CompareStringW
GetVolumeInformationA
WriteConsoleA
GetFileAttributesA
GetEnvironmentVariableA
CopyFileA
CreateFileMappingW
GetTimeFormatA
WriteConsoleA
GetDriveTypeA
msoeacct
ValidEmailAddress
DllCanUnloadNow
DllGetClassObject
HrCreateAccountManager
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.sdata Size: 756KB - Virtual size: 759KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE