Static task
static1
Behavioral task
behavioral1
Sample
1c842dd4a4e90811d655685fe90a4180b71eddea35662d16c0152776ee17aca9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1c842dd4a4e90811d655685fe90a4180b71eddea35662d16c0152776ee17aca9.exe
Resource
win10v2004-20220812-en
General
-
Target
1c842dd4a4e90811d655685fe90a4180b71eddea35662d16c0152776ee17aca9
-
Size
131KB
-
MD5
a2b2580ee25bf18178b3a5948b989be0
-
SHA1
878b80fa2f93b7abbe99afb3c580442c1f47749c
-
SHA256
1c842dd4a4e90811d655685fe90a4180b71eddea35662d16c0152776ee17aca9
-
SHA512
a7083071691c1af195ac4d3c6a8298f01c45141511e9fa7e2b8a09b92158ff803586caa69b820e9e50ecb65951129aa8dedb91f5e6b0931477f5336daec27c2b
-
SSDEEP
3072:Ov4mv2TL5a29cjXAhz/X/+NMsV0ySNXN0ztxP:C4pTFacJ/XG0J+5
Malware Config
Signatures
Files
-
1c842dd4a4e90811d655685fe90a4180b71eddea35662d16c0152776ee17aca9.exe windows x86
38d7384827429900fd40eb2b786b1271
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ResetEvent
RemoveDirectoryA
GetProcessHeap
CancelIo
WriteFile
GetLocaleInfoA
SetLocalTime
ReleaseMutex
MapViewOfFile
HeapSize
GetFileAttributesA
GetCommandLineA
CreateMailslotA
GetStdHandle
IsBadWritePtr
DeleteFileA
CreateDirectoryA
GetModuleHandleA
VirtualProtect
GetDriveTypeW
SetLastError
user32
PostMessageW
DestroyMenu
SetCursor
SetFocus
PeekMessageA
GetWindowTextW
GetWindowLongW
wsprintfA
GetCapture
GetCaretPos
LoadCursorA
DispatchMessageA
LoadImageA
hnetcfg
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
HNetGetSharingServicesPage
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ