Static task
static1
Behavioral task
behavioral1
Sample
215f72e65add1d8745c16cd6e7a970f4e76e32b52bf1390ecc56a99531ba0168.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
215f72e65add1d8745c16cd6e7a970f4e76e32b52bf1390ecc56a99531ba0168.exe
Resource
win10v2004-20220812-en
General
-
Target
215f72e65add1d8745c16cd6e7a970f4e76e32b52bf1390ecc56a99531ba0168
-
Size
321KB
-
MD5
8342fd7ffa8a269e7f9b0d6545410648
-
SHA1
c45d2da84c2a89b0c2ee46d91a7d502a453d75ba
-
SHA256
215f72e65add1d8745c16cd6e7a970f4e76e32b52bf1390ecc56a99531ba0168
-
SHA512
15b707de88d5f5d89d0fa82fb3fa78e37678c285ba1099c58f7081d3d516295380df0c22bc428e448c8582d1f415262af24521e19bea2eb0791d00fd601d966a
-
SSDEEP
6144:rdVhzctJoYKS6/TJ80uIe1NF/5dVI4vYXbuleeehcJY1CZ/Hko8ZjJjsXPpPkYfE:rdctJM/TJXe1RLYrutehGZ/v6JAXhMYs
Malware Config
Signatures
Files
-
215f72e65add1d8745c16cd6e7a970f4e76e32b52bf1390ecc56a99531ba0168.exe windows x86
2f7738180f6d9d2d69c3f7e4e9506922
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
InterlockedExchange
GlobalFree
GetACP
GetStdHandle
Sleep
LockResource
GlobalUnlock
SetConsoleOutputCP
GetDriveTypeA
EnterCriticalSection
GetLastError
RaiseException
SetErrorMode
GetLocaleInfoA
HeapCreate
FoldStringA
VirtualProtect
GlobalAddAtomA
LoadLibraryExA
GlobalDeleteAtom
user32
GetCursorPos
GetMenuItemInfoA
ShowWindow
CharToOemBuffA
SetForegroundWindow
GetWindowTextA
GetFocus
ClipCursor
DrawEdge
IsIconic
GetClassNameA
ReleaseDC
GetParent
BeginPaint
EndPaint
GetActiveWindow
DrawTextA
ValidateRect
GetWindow
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerInstallFileA
VerFindFileA
VerQueryValueA
rasadhlp
WSAttemptAutodialName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ