Static task
static1
Behavioral task
behavioral1
Sample
70bdeb9a80615093588b0a2ca55f9b2415693f2b8ef139e7df2165a5bafbb46f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70bdeb9a80615093588b0a2ca55f9b2415693f2b8ef139e7df2165a5bafbb46f.exe
Resource
win10v2004-20220812-en
General
-
Target
70bdeb9a80615093588b0a2ca55f9b2415693f2b8ef139e7df2165a5bafbb46f
-
Size
796KB
-
MD5
09e80df1aef985f8f0fea06d3fc0e1e0
-
SHA1
4d5ff07cec7ca3937e41ba6fb89ed7adb3088b4e
-
SHA256
70bdeb9a80615093588b0a2ca55f9b2415693f2b8ef139e7df2165a5bafbb46f
-
SHA512
53c66dec4e4e9a6d6b3d57f78f50447e2f0ea94ed5c84389a942f286c07aa7624e3c9f78305e7539455b86ab3231a5b501c611cf5ff705063fbfb5e3f9539dd7
-
SSDEEP
24576:XL/Hp0U06Q8R3Hk2MNFPWqSYrCRFwYTtA:7u9LwXmQqV2T
Malware Config
Signatures
Files
-
70bdeb9a80615093588b0a2ca55f9b2415693f2b8ef139e7df2165a5bafbb46f.exe windows x86
09a420d6c54d9cef0491e836c84ed3d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindClose
DeviceIoControl
GetVersionExA
GlobalLock
GetCurrentThread
GetFileAttributesW
CreateEventA
GetModuleHandleA
CloseHandle
GetFileAttributesW
RemoveDirectoryW
VirtualProtectEx
SetCommBreak
LocalFlags
GetStringTypeA
GetPrivateProfileSectionA
SetLastError
GetPrivateProfileIntA
CreateDirectoryW
HeapFree
GetCurrentProcess
user32
PostMessageW
DispatchMessageA
SetFocus
IsZoomed
IsDialogMessageA
IsWindow
GetWindowTextW
GetWindowLongW
PeekMessageW
LoadCursorW
wsprintfW
SetCursorPos
CloseDesktop
mswsock
GetNameByTypeA
getnetbyname
GetServiceA
GetAddressByNameA
ntshrui
IsPathSharedA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ