Static task
static1
Behavioral task
behavioral1
Sample
811ee0b3f5e61c30e761e46181a50d99c24181b7514a4f30a32303ee25ebde6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
811ee0b3f5e61c30e761e46181a50d99c24181b7514a4f30a32303ee25ebde6e.exe
Resource
win10v2004-20220812-en
General
-
Target
811ee0b3f5e61c30e761e46181a50d99c24181b7514a4f30a32303ee25ebde6e
-
Size
800KB
-
MD5
2f7158a3c90b195bea17d6fd78e2a496
-
SHA1
7134e16b19f9c0287638d732023add7bb89a9ddf
-
SHA256
811ee0b3f5e61c30e761e46181a50d99c24181b7514a4f30a32303ee25ebde6e
-
SHA512
e03cdb6afe22be2f4c91499fd047aec6ffd3f8bc82205be5718b24d0e821533c35adbf6ccad8955db17dc924fc146e214ab679ee306d6c06bca14464126bd398
-
SSDEEP
12288:yBhwfbQF7CM2pn35uqyT2RZFXvQQFIXBeCfEVmLaFAITfunU2/q:MSTQF7CM03OTwFtqeH0L2TI
Malware Config
Signatures
Files
-
811ee0b3f5e61c30e761e46181a50d99c24181b7514a4f30a32303ee25ebde6e.exe windows x86
3ac67236a498acc94072722a6eb70fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
FindClose
GetLocaleInfoW
GetCurrentProcess
RemoveDirectoryW
GetModuleHandleA
LocalLock
GetDriveTypeW
MapViewOfFile
IsValidCodePage
SetLastError
GetFileAttributesA
HeapFree
GetFileAttributesA
FindResourceW
IsBadWritePtr
CreateDirectoryW
VirtualProtect
GetStringTypeA
TlsGetValue
GetExitCodeThread
user32
SetFocus
GetWindowTextW
GetWindowLongW
SetCursor
PostMessageW
LoadImageW
wsprintfW
PeekMessageW
IsWindow
DispatchMessageA
IsDialogMessageA
LoadCursorA
LoadStringA
msctf
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
TF_InitSystem
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE