Static task
static1
Behavioral task
behavioral1
Sample
404620b2e79569a343367c78f78a43b74785108984843d4a4944a2efb0298d0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
404620b2e79569a343367c78f78a43b74785108984843d4a4944a2efb0298d0f.exe
Resource
win10v2004-20220812-en
General
-
Target
404620b2e79569a343367c78f78a43b74785108984843d4a4944a2efb0298d0f
-
Size
797KB
-
MD5
e8212985d96f02cdcde5214ce0bb1534
-
SHA1
4dd003b37e3ba86561287bfbbd94032ab0a35e42
-
SHA256
404620b2e79569a343367c78f78a43b74785108984843d4a4944a2efb0298d0f
-
SHA512
8ae90420aafe64259c525d429d541e3a2f38f2ea3dcd3f78eda135b0fdbcdfa71eedbbcaa3b1a44e4d192c123c5e34697796ec125b253fb439efb3cfa2081374
-
SSDEEP
24576:25C8g7gmDR9Au5sdhZ96dH7WoK37COjlxMVidr:V8g7ZRmM2hZcStWKCi
Malware Config
Signatures
Files
-
404620b2e79569a343367c78f78a43b74785108984843d4a4944a2efb0298d0f.exe windows x86
5bcf7feece0cafe4bd495fe3a8a6abd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetExitCodeThread
GetCommandLineA
IsBadWritePtr
GetProcessHeap
CreateDirectoryA
SetLastError
RemoveDirectoryA
MapViewOfFile
FindResourceA
HeapSize
IsValidCodePage
GetLocaleInfoA
FindClose
GetStdHandle
CancelIo
GetDriveTypeW
VirtualProtect
CreateMailslotW
ResetEvent
GetFileAttributesA
user32
DispatchMessageA
PostMessageW
GetWindowTextW
LoadCursorA
SetCursor
IsDialogMessageA
SetFocus
DestroyMenu
PeekMessageA
wsprintfA
GetWindowLongW
GetCapture
LoadImageW
ipsmsnap
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE