Static task
static1
Behavioral task
behavioral1
Sample
380b5fc272534932a2d9a192d0b63a88f03607b80f66014b1741957067a55d76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
380b5fc272534932a2d9a192d0b63a88f03607b80f66014b1741957067a55d76.exe
Resource
win10v2004-20220812-en
General
-
Target
380b5fc272534932a2d9a192d0b63a88f03607b80f66014b1741957067a55d76
-
Size
393KB
-
MD5
0a5852a99c8e9ad25fd0f275d18f65cc
-
SHA1
f352c7f6b082a259d91528fff271c3cc873b4972
-
SHA256
380b5fc272534932a2d9a192d0b63a88f03607b80f66014b1741957067a55d76
-
SHA512
7899906ba1ff5052e3b947a4b70bf965632083fa7a5f2f38de0b81dcbcb1b8666456d4de2089097c1fc293676289cd08426efc089e0ef630b28edc242b364b01
-
SSDEEP
12288:smskaIfdyvnRXDKmQ7FNJO4GJ6KAkA1HzwDKQ:nGxpmNBO4GJ9Ak4H
Malware Config
Signatures
Files
-
380b5fc272534932a2d9a192d0b63a88f03607b80f66014b1741957067a55d76.exe windows x86
677add558524073572577292e44906ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
SetEvent
ResumeThread
GetPriorityClass
GetStdHandle
VirtualProtect
GetFileAttributesW
lstrlenW
GetCommandLineA
GetCurrentDirectoryA
GetModuleHandleA
GetProcessHeap
DisconnectNamedPipe
lstrcpyA
WriteConsoleW
CopyFileA
CreatePipe
HeapDestroy
WriteConsoleW
WriteConsoleW
DeleteFileA
mmcndmgr
DllRegisterServer
DllRegisterServer
DllUnregisterServer
DllUnregisterServer
shell32
SHGetSettings
DragFinish
DuplicateIcon
SHGetDiskFreeSpaceA
DragQueryFileA
ShellMessageBoxA
DllUnregisterServer
StrChrA
DragAcceptFiles
ExtractIconA
SHFree
ShellAboutA
SHGetMalloc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE