Static task
static1
Behavioral task
behavioral1
Sample
a257576dc8ffcdd5d83d54d0e55653249c3535be52c0df69e91fd9d5d2d61dbb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a257576dc8ffcdd5d83d54d0e55653249c3535be52c0df69e91fd9d5d2d61dbb.exe
Resource
win10v2004-20220812-en
General
-
Target
a257576dc8ffcdd5d83d54d0e55653249c3535be52c0df69e91fd9d5d2d61dbb
-
Size
306KB
-
MD5
302cbd51edbb329acbd282d09ca10cc0
-
SHA1
b735c4848ba22fda907747b6baa3f147e474e633
-
SHA256
a257576dc8ffcdd5d83d54d0e55653249c3535be52c0df69e91fd9d5d2d61dbb
-
SHA512
8a9b492165faf13fe18f4c17ee980a4232142291739d6ad1b6b3509b3bad9eb63fa162c62b873788d523fd69b60787a6c723805bcf3dbf72674832b0d5f7e50e
-
SSDEEP
6144:ITWnqJ4a6rr954a1Thg1/UClW6Vef7yDEMkHBLLHKUPch+:bqJWrx54sg1/tlwqkHBLWS
Malware Config
Signatures
Files
-
a257576dc8ffcdd5d83d54d0e55653249c3535be52c0df69e91fd9d5d2d61dbb.exe windows x86
2ef7890845e3c60a89470c0218799033
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
GetCurrentProcess
TlsGetValue
RemoveDirectoryW
GetStringTypeA
MapViewOfFile
HeapFree
VirtualProtect
IsValidCodePage
GetDriveTypeW
GetFileAttributesA
LocalLock
GetTickCount
FindResourceW
GetExitCodeThread
GetFileAttributesA
GetLocaleInfoW
CreateDirectoryW
SetLastError
FindClose
GetModuleHandleA
user32
SetFocus
GetWindowLongW
IsWindow
DispatchMessageA
PostMessageW
GetWindowTextW
LoadStringW
LoadCursorA
PeekMessageW
LoadImageW
IsDialogMessageA
SetCursor
wsprintfW
msctf
DllCanUnloadNow
TF_InitSystem
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE