Static task
static1
Behavioral task
behavioral1
Sample
584177af21db7e7ff5dc36dd936de13c89cde38a5f3e1da04576bf1302bb25b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
584177af21db7e7ff5dc36dd936de13c89cde38a5f3e1da04576bf1302bb25b2.exe
Resource
win10v2004-20220901-en
General
-
Target
584177af21db7e7ff5dc36dd936de13c89cde38a5f3e1da04576bf1302bb25b2
-
Size
301KB
-
MD5
93dab11f56e6d6721d4194cc13e9fa00
-
SHA1
92f6cb998186cb073d342050fd5dff59d13c83ee
-
SHA256
584177af21db7e7ff5dc36dd936de13c89cde38a5f3e1da04576bf1302bb25b2
-
SHA512
dd68b61fe45a0491cf3073d6c5c54eb0a99ca6eb27ba58ff59f007100f7c6f2c146cc55ea94c0c28b2fa02b0e98705992e58bf422b506fc45d3316eaaa65f803
-
SSDEEP
6144:MbWngZY4v7f8Tqd853ucWwo8AHScNT4sftv3TujMa/67dBsn:9g/jCM8cTX13CIaC7
Malware Config
Signatures
Files
-
584177af21db7e7ff5dc36dd936de13c89cde38a5f3e1da04576bf1302bb25b2.exe windows x86
f584b49800dc73179b2239d7f4acc8cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsValidCodePage
CreateDirectoryW
FindResourceW
HeapFree
GetFileAttributesA
GetModuleHandleA
RemoveDirectoryW
LocalLock
GetCurrentProcess
VirtualProtect
GetStringTypeA
GetDriveTypeW
GetExitCodeThread
GetFileAttributesA
GetLocaleInfoW
TlsGetValue
GetTickCount
SetLastError
MapViewOfFile
FindClose
IsBadWritePtr
user32
SetFocus
wsprintfW
PostMessageW
LoadStringA
LoadCursorA
LoadImageW
IsWindow
SetCursor
GetWindowTextW
DispatchMessageA
GetWindowLongW
PeekMessageW
IsDialogMessageA
msctf
TF_InitSystem
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE