Static task
static1
Behavioral task
behavioral1
Sample
c39f785c2e30d7192b35057b87876daa54fc733daddd54835171bc78375c89f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c39f785c2e30d7192b35057b87876daa54fc733daddd54835171bc78375c89f2.exe
Resource
win10v2004-20220812-en
General
-
Target
c39f785c2e30d7192b35057b87876daa54fc733daddd54835171bc78375c89f2
-
Size
300KB
-
MD5
47beca90642dde05463cc19e2079e430
-
SHA1
0418c8bdb328c3f3d2b3cab906e4a95148b68c60
-
SHA256
c39f785c2e30d7192b35057b87876daa54fc733daddd54835171bc78375c89f2
-
SHA512
3d7368a89c43d607a9c2bcc34659905eac5298b23f4930bf84ca76e10f8c64adf51cbad2a89a8285c99f5cc6c8c499fb2d9d23ab79e118f31887309e68c5af02
-
SSDEEP
6144:2MZTxguo24uKpHmkOPd/ygRkJy6uXGFV/vnuCY:2MTD4JlgVyPyhIvuH
Malware Config
Signatures
Files
-
c39f785c2e30d7192b35057b87876daa54fc733daddd54835171bc78375c89f2.exe windows x86
795b9bce989c20d0d0588812a71e53f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPriorityClass
GetFileAttributesA
GetModuleHandleA
ReadConsoleW
RemoveDirectoryA
GetProcessHeap
CreatePipe
HeapSize
GetCommandLineA
GetDriveTypeA
SetLastError
GetLocaleInfoA
GetStdHandle
VirtualProtect
WriteFile
CreateDirectoryA
ReleaseMutex
SetLocalTime
ResetEvent
IsBadWritePtr
DeleteFileA
user32
DrawIcon
PostMessageA
GetCaretPos
GetWindowTextW
wsprintfA
GetWindowLongW
PeekMessageA
GetCapture
DestroyMenu
LoadCursorA
DispatchMessageA
SetFocus
SetCursor
els
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ