Static task
static1
Behavioral task
behavioral1
Sample
c881130e3169bce1f9982181689b5fb4ef20645226f5c0581883e99aa1d263e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c881130e3169bce1f9982181689b5fb4ef20645226f5c0581883e99aa1d263e3.exe
Resource
win10v2004-20220812-en
General
-
Target
c881130e3169bce1f9982181689b5fb4ef20645226f5c0581883e99aa1d263e3
-
Size
775KB
-
MD5
11005d657e5a7acd05f4d9d6347a8273
-
SHA1
78cf53eedbc3a76855bc0dba1fe0e4f5e31ce802
-
SHA256
c881130e3169bce1f9982181689b5fb4ef20645226f5c0581883e99aa1d263e3
-
SHA512
dfe0f689aa9eff2fba368058b4598406eb1b736af18cdcaa4bd566bb2c5f8b0c14ca063618f214fb4ae66fab56c8c1d986a416bd1cadfb51eb5a60da578efbf5
-
SSDEEP
12288:hUKspBVIF8hzgBByK0LeLHLSc1fsot3EIhqrgshGTn/UsuYrMfb:vs7VrhESeLxsdIQhG7rMD
Malware Config
Signatures
Files
-
c881130e3169bce1f9982181689b5fb4ef20645226f5c0581883e99aa1d263e3.exe windows x86
693beace5730cd5a7bc74ba50adf6ad5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPriorityClass
GetCurrentDirectoryA
ReleaseMutex
GetModuleHandleA
GetStartupInfoA
GetLastError
HeapCreate
DisconnectNamedPipe
WriteConsoleW
SetEvent
CreatePipe
WriteConsoleW
GetFileAttributesA
lstrcpyW
lstrlenW
CloseHandle
IsDebuggerPresent
CopyFileW
WriteConsoleW
GetStdHandle
ClearCommBreak
msftedit
RichEditWndProc
RichComboBoxWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
shell32
SHGetDiskFreeSpaceA
DragFinish
ExtractIconA
SHGetMalloc
DuplicateIcon
DragAcceptFiles
ShellAboutA
ShellMessageBoxA
DragQueryFileA
SHGetSettings
SHFree
StrChrA
DllUnregisterServer
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 766KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ