Static task
static1
Behavioral task
behavioral1
Sample
4259262d299621cb98c221b8309444b3c74a9b9ab71e1dd0d3f955b300c9dfad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4259262d299621cb98c221b8309444b3c74a9b9ab71e1dd0d3f955b300c9dfad.exe
Resource
win10v2004-20220812-en
General
-
Target
4259262d299621cb98c221b8309444b3c74a9b9ab71e1dd0d3f955b300c9dfad
-
Size
301KB
-
MD5
83b48504c67c4ab8793b620811d66ba0
-
SHA1
950f1387af737f99002daf649fa027594a947215
-
SHA256
4259262d299621cb98c221b8309444b3c74a9b9ab71e1dd0d3f955b300c9dfad
-
SHA512
e164b8f92c7d28c315f683bbb41233b45e3f2327ba002eeae164611c40878935d7814f621764f710e052aba820e175023dff4a53074227ea0997f35d769745df
-
SSDEEP
6144:NrWndezqZIyaGlrGJfuN/6O+xS2kRD7/wP18xHJ/Xz:AQ2rhmGNb+xShWI/
Malware Config
Signatures
Files
-
4259262d299621cb98c221b8309444b3c74a9b9ab71e1dd0d3f955b300c9dfad.exe windows x86
2a9318133512d810a4d8918baddc124d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetExitCodeThread
IsValidCodePage
SetLastError
RemoveDirectoryW
HeapFree
GetFileAttributesA
GetLocaleInfoW
GetModuleHandleA
LocalLock
GetTickCount
GetStringTypeA
CreateDirectoryW
GetCurrentProcess
GetDriveTypeW
MapViewOfFile
GetFileAttributesA
IsBadWritePtr
TlsGetValue
FindResourceW
FindClose
user32
LoadStringA
SetFocus
wsprintfW
DispatchMessageA
PeekMessageW
LoadCursorA
LoadImageW
IsWindow
SetCursor
PostMessageW
GetWindowTextW
IsDialogMessageA
GetWindowLongW
msctf
DllUnregisterServer
TF_InitSystem
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE