Static task
static1
Behavioral task
behavioral1
Sample
f433e921028e4c4d501134af3507206929e5b1632fd2492247dc9cffc7af85cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f433e921028e4c4d501134af3507206929e5b1632fd2492247dc9cffc7af85cf.exe
Resource
win10v2004-20220812-en
General
-
Target
f433e921028e4c4d501134af3507206929e5b1632fd2492247dc9cffc7af85cf
-
Size
796KB
-
MD5
82b07ed0a6fa73cce893c769a120f0f0
-
SHA1
9608b7f5601c628367a33c46cfa363a5d7af3aaf
-
SHA256
f433e921028e4c4d501134af3507206929e5b1632fd2492247dc9cffc7af85cf
-
SHA512
6fa289bd0f49a259a9641d72992ec69fe5e8ae6e44db14abc526cb8db9aae121aa8082100b6fd1500e998f0c5f3e3703dcef328fbb3bda7d3c57713c17032026
-
SSDEEP
12288:MGEWQHzniYIDwbfQXb/6GSw6+wLCVFC3y1/KApOESMnSf5AV51kWJo5pQ6YSLdH3:tQH+YeXL6TCVcxAIbAV0WuG6DLdHlo
Malware Config
Signatures
Files
-
f433e921028e4c4d501134af3507206929e5b1632fd2492247dc9cffc7af85cf.exe windows x86
1f019b413168dacbda5a1519aeafd156
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
GetStdHandle
DeleteFileA
VirtualProtect
CreateDirectoryA
ReleaseMutex
SetLastError
ReadConsoleW
GetCommandLineA
ResetEvent
GetProcessHeap
WriteFile
SetLocalTime
HeapSize
GetLocaleInfoA
GetPriorityClass
GetDriveTypeA
GetFileAttributesA
RemoveDirectoryA
CreatePipe
GetModuleHandleA
user32
DispatchMessageA
wsprintfA
DrawIcon
DestroyMenu
GetWindowTextW
PeekMessageA
GetCaretPos
GetWindowLongW
GetCapture
LoadCursorA
SetFocus
SetCursor
GetMessageW
els
DllRegisterServer
DllRegisterServer
DllGetClassObject
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ