Static task
static1
Behavioral task
behavioral1
Sample
00c4bb667b64e8c70446183891689452c42a878680ec24d84ed7800a25a66e2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00c4bb667b64e8c70446183891689452c42a878680ec24d84ed7800a25a66e2a.exe
Resource
win10v2004-20220812-en
General
-
Target
00c4bb667b64e8c70446183891689452c42a878680ec24d84ed7800a25a66e2a
-
Size
372KB
-
MD5
9d25ba377e88c5b94a627f128d77e6d5
-
SHA1
5efade948bbe3e08a35b695fd82e1ec53d0d2f02
-
SHA256
00c4bb667b64e8c70446183891689452c42a878680ec24d84ed7800a25a66e2a
-
SHA512
6d1c4f2bf1d12f8a95a4a5fe5ece0fdcc78491e7dba14434451827a3c5d99a70d31ba88fbbe6dee42fc6d4bce81daa680255ac31bf54dfb9aad423b77fdc9a04
-
SSDEEP
6144:5JjT4UsxnVs3zjKFYUKGYyrBKcHnjYfIHTn1rrQzWmtXhzpJP/yDfMvCecDjd7mN:LjcZ6GMWTHnnzn1rrQ5tTIJp7mf
Malware Config
Signatures
Files
-
00c4bb667b64e8c70446183891689452c42a878680ec24d84ed7800a25a66e2a.exe windows x86
aaf8e5d43c4ac94a365ab387c42ca2a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
FindVolumeClose
CloseHandle
VirtualAlloc
ResumeThread
GetDriveTypeW
WriteFile
FreeConsole
GetEnvironmentVariableA
InterlockedExchange
LocalSize
ResetEvent
GetExitCodeProcess
LocalFree
CreateThread
GetMailslotInfo
GetModuleHandleW
GetACP
GetPrivateProfileIntW
GlobalFree
user32
EndDialog
GetClientRect
CreateWindowExA
DrawStateW
DispatchMessageA
GetSysColor
GetClassInfoA
IsWindow
CallWindowProcW
SetFocus
GetCursorInfo
GetSysColor
GetKeyboardType
mstime
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ