Static task
static1
Behavioral task
behavioral1
Sample
399787122b46b1cf41ae605f7e68465e44cd9f7e5af57e00b97bee39d94ffe2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
399787122b46b1cf41ae605f7e68465e44cd9f7e5af57e00b97bee39d94ffe2c.exe
Resource
win10v2004-20220812-en
General
-
Target
399787122b46b1cf41ae605f7e68465e44cd9f7e5af57e00b97bee39d94ffe2c
-
Size
408KB
-
MD5
5ffa723eff46ff7e83edf8c99e5a96bf
-
SHA1
1319ae25d3125e0e24a1f45371f43cc389b7df38
-
SHA256
399787122b46b1cf41ae605f7e68465e44cd9f7e5af57e00b97bee39d94ffe2c
-
SHA512
c00f6046eb9eca7dc6996c9fc62b807e0c73d252b1d7df4bbd0e6716c1911a8e8ecdfcec48eadd54842520b2b7dbb05e7efe174d1059449a10a6341cc44035f2
-
SSDEEP
6144:nCn+dGQxGOENlsV+WSRtTMh3LN0sC2alTjCO+9kjJJJjHfWvAliFJmh:hxesV4to1N0s8k9UL1fWjCh
Malware Config
Signatures
Files
-
399787122b46b1cf41ae605f7e68465e44cd9f7e5af57e00b97bee39d94ffe2c.exe windows x86
00082a3d91a9dd974d4e5774725c4407
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
GetPrivateProfileIntA
GetCurrentProcess
GlobalLock
RemoveDirectoryW
HeapFree
SetCommBreak
GetModuleHandleA
SetLastError
FindClose
VirtualProtectEx
LocalFlags
GetVersionExA
CloseHandle
GetFileAttributesW
CreateDirectoryW
GetFileAttributesW
GetStringTypeA
GetPrivateProfileSectionA
DeviceIoControl
CreateEventA
user32
DispatchMessageA
LoadCursorW
PostMessageW
PeekMessageW
wsprintfW
SetCursorPos
GetWindowLongW
IsZoomed
SetFocus
IsDialogMessageA
IsWindow
GetWindowTextW
GrayStringA
mswsock
GetServiceA
getnetbyname
GetAddressByNameA
GetNameByTypeA
ntshrui
IsPathSharedA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ