Static task
static1
Behavioral task
behavioral1
Sample
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe
Resource
win10v2004-20220812-en
General
-
Target
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952
-
Size
300KB
-
MD5
a2a211edc8ea64fb8ffd4a5ee1c7ef60
-
SHA1
11c58ae051e5e840c99b796334a153656d097c5f
-
SHA256
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952
-
SHA512
09c1e2c4d77d080b71e4bfb62e5cf74ca3eae1220e333b710324780e6cca07ef572283e6ccd80bf2f172ee4cbe85eaf2b815744204a691792dabd25c5d69930c
-
SSDEEP
6144:zOMzb0volYkmRVmvDi2ulmXhF6QdpppJiTi08yhE:VdfmRVme2amv6WFyhE
Malware Config
Signatures
Files
-
537a73484febaecf7774b84738ce8cb4e0260fb88c5e9cc9f81f8d3a25b3e952.exe windows x86
f5a1478ce3f87ee00a9b816c9be820f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SuspendThread
GetDriveTypeA
GetFileAttributesA
GetStdHandle
CreateDirectoryA
GetLocaleInfoA
GlobalSize
IsBadReadPtr
GetPriorityClass
ResetEvent
GetModuleHandleA
HeapSize
VirtualProtect
CreatePipe
ReleaseMutex
ReadConsoleW
WriteFile
GetCommandLineA
DeleteFileA
SetLocalTime
GetProcessHeap
user32
wsprintfA
PeekMessageA
GetWindowLongW
DrawIcon
GetWindowTextW
GetMessageW
GetCapture
GetCaretPos
SetFocus
DestroyMenu
LoadCursorA
DispatchMessageA
SetCursor
els
DllGetClassObject
DllGetClassObject
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ