Static task
static1
Behavioral task
behavioral1
Sample
c542f76bb65e58ac8bc47bf9dd4fc986f0ca3a1c7daa0c6bbeea0ab0ff985db5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c542f76bb65e58ac8bc47bf9dd4fc986f0ca3a1c7daa0c6bbeea0ab0ff985db5.exe
Resource
win10v2004-20220812-en
General
-
Target
c542f76bb65e58ac8bc47bf9dd4fc986f0ca3a1c7daa0c6bbeea0ab0ff985db5
-
Size
311KB
-
MD5
9348e008c4a09ef20088edf523cc7020
-
SHA1
5e6bcfb87105029d17dc547e5bf286248227bfaf
-
SHA256
c542f76bb65e58ac8bc47bf9dd4fc986f0ca3a1c7daa0c6bbeea0ab0ff985db5
-
SHA512
8ab9b2b5fbac9c5d0116bd4df9d5470674d3fc7c16ae90b7bcb96302e3f8ea5adae7e014ae4396ed3db481229726061b562fa26b3c932268c76824409d336e93
-
SSDEEP
6144:Y7YMRra5LgEAJKaOb2Kj+UvhOvmCW65Pwtfc6UUkUOWeXsN:8ZM9AsJbrkm+ycFw
Malware Config
Signatures
Files
-
c542f76bb65e58ac8bc47bf9dd4fc986f0ca3a1c7daa0c6bbeea0ab0ff985db5.exe windows x86
2033c374b757eca0dc27457ae970a64a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
SetLastError
GetFileAttributesW
CreateEventA
LocalFlags
GetPrivateProfileIntA
CloseHandle
CreateDirectoryW
GetStringTypeA
DeviceIoControl
GetModuleHandleA
GlobalLock
RemoveDirectoryW
GetCurrentProcess
HeapFree
FindClose
GetCurrentThread
GetVersionExA
GetPrivateProfileSectionA
GetFileAttributesW
VirtualProtectEx
user32
IsDialogMessageA
InsertMenuW
PeekMessageW
PostMessageW
IsWindow
IsZoomed
wsprintfW
GetWindowTextW
LoadCursorW
GetWindowLongW
SetCursorPos
DispatchMessageA
SetFocus
ntmarta
AccConvertAclToAccess
AccGetExplicitEntries
AccConvertSDToAccess
AccFreeIndexArray
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ