Static task
static1
Behavioral task
behavioral1
Sample
228a9a523eade03a3235e79f8073c502174e1be5a0cbba15386fa2b1f265e2ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
228a9a523eade03a3235e79f8073c502174e1be5a0cbba15386fa2b1f265e2ac.exe
Resource
win10v2004-20220812-en
General
-
Target
228a9a523eade03a3235e79f8073c502174e1be5a0cbba15386fa2b1f265e2ac
-
Size
126KB
-
MD5
927e4fb8dbfd43de15718cc789c5e590
-
SHA1
da0682c84ebbdb9b07be4ab80f08762797c9a1c2
-
SHA256
228a9a523eade03a3235e79f8073c502174e1be5a0cbba15386fa2b1f265e2ac
-
SHA512
c3ab56f61cc34b0fca58303df8053303437fb850864b37980f66b7bcf91d448803415dcbb123c9a2b28783a710983777d7490cdcd75bf4f7b517ae70ee3ca6f5
-
SSDEEP
3072:G5laMcriC44q8RS0qfUX8fZsk9IfDhzvyqOAxH2emGzOG9KjE5r9:Alzcr81840cU4JCfDhza2xWemGzd9KEB
Malware Config
Signatures
Files
-
228a9a523eade03a3235e79f8073c502174e1be5a0cbba15386fa2b1f265e2ac.exe windows x86
419c416959d9b5e04f5b46153f269dd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentThread
CreateEventA
GlobalLock
GetCurrentProcess
TlsGetValue
GetModuleHandleA
GetStringTypeA
GetFileAttributesW
FindClose
IsValidCodePage
GetLocaleInfoW
GetPrivateProfileSectionA
CreateDirectoryW
HeapFree
RemoveDirectoryW
GetExitCodeThread
LocalFlags
VirtualProtectEx
GetVersionExA
SetLastError
GetFileAttributesW
user32
DispatchMessageA
SetCursor
LoadCursorA
PeekMessageW
GetWindowLongW
SetCursorPos
IsDialogMessageA
wsprintfW
DefDlgProcA
PostMessageW
SetFocus
GetWindowTextW
IsWindow
msdtcprx
DTC_XaStart
DTC_XaCommit
DTC_XaOpen
DTC_XaEnd
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE