Static task
static1
Behavioral task
behavioral1
Sample
860bae25b0ed3f8135a33d8990242ce5620779697e6fbb7134addab640f4a867.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
860bae25b0ed3f8135a33d8990242ce5620779697e6fbb7134addab640f4a867.exe
Resource
win10v2004-20220812-en
General
-
Target
860bae25b0ed3f8135a33d8990242ce5620779697e6fbb7134addab640f4a867
-
Size
136KB
-
MD5
9305ed28ae390b5f0a08b021096967ae
-
SHA1
f1f55d61f30e43d6bafc0b8d7913ec98a57468d9
-
SHA256
860bae25b0ed3f8135a33d8990242ce5620779697e6fbb7134addab640f4a867
-
SHA512
43bcb8032f7e1264c6dd49018881c1b06dc43dba06eb94cbb8ecbcd9858c3bf2c5355c6849f5be15114bf5165f01a061fdf30b4fa2ab3b5c7ca52befa1283f03
-
SSDEEP
3072:MRZzkGtXDeeovC2qnKi9gxP27vquIgooReZVH+0yh:yrtrLLnKrO7BIw+VeHh
Malware Config
Signatures
Files
-
860bae25b0ed3f8135a33d8990242ce5620779697e6fbb7134addab640f4a867.exe windows x86
7ae81d24c3c1c70facbddc0073c436ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoA
FindClose
IsBadWritePtr
GetFileAttributesA
GetModuleHandleA
IsValidCodePage
GetExitCodeThread
RemoveDirectoryA
GetTickCount
GetDriveTypeW
FindResourceA
TlsGetValue
VirtualProtect
ResetEvent
GetProcessHeap
CreateDirectoryA
GetStringTypeA
SetLastError
GetFileAttributesA
HeapSize
MapViewOfFile
user32
IsWindow
PeekMessageA
SetCursor
GetWindowTextW
LoadCursorA
IsDialogMessageA
PostMessageW
GetWindowLongW
GetCapture
DispatchMessageA
wsprintfW
SetFocus
LoadImageW
msaatext
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE