Static task
static1
Behavioral task
behavioral1
Sample
3072a64f1bed6e8505794927d57f495a7f663192f2d4355b6687861ce861afc7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3072a64f1bed6e8505794927d57f495a7f663192f2d4355b6687861ce861afc7.exe
Resource
win10v2004-20220901-en
General
-
Target
3072a64f1bed6e8505794927d57f495a7f663192f2d4355b6687861ce861afc7
-
Size
368KB
-
MD5
8748709438749065a403e0d2c1a1405d
-
SHA1
4b276933022ff05700ac7a7b3715d1fcfd252ceb
-
SHA256
3072a64f1bed6e8505794927d57f495a7f663192f2d4355b6687861ce861afc7
-
SHA512
a8e6b03b23afb8eb338a4e2734b8431bd303db7c63dd22150326b23aabefb7e1e17db20ff66ae90654d2731e99300259a8cd8aac7432940f94cea937d5230f67
-
SSDEEP
6144:4jqRMwhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:4jqRMWrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
Files
-
3072a64f1bed6e8505794927d57f495a7f663192f2d4355b6687861ce861afc7.exe windows x86
154ccfb289478e4a95cc8213244ad22b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
EnterCriticalSection
GetConsoleAliasW
GetCurrentProcessId
GetPrivateProfileStringA
FindClose
CreateEventW
FindAtomW
EnumCalendarInfoW
GetCurrentThreadId
HeapCreate
lstrlenW
GetNumberFormatW
ReadFile
GetModuleHandleA
LocalFree
SetLastError
SetEvent
TlsGetValue
GetDriveTypeW
user32
SetFocus
GetKeyboardType
GetKeyState
IsWindow
DispatchMessageA
GetCursorInfo
GetSysColor
GetClassInfoA
GetClientRect
GetMenuInfo
CallWindowProcW
DispatchMessageA
DrawTextA
unimdmat
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
UmCloseModem
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ