Static task
static1
Behavioral task
behavioral1
Sample
703f3099977dca8d4367c1f180b677df76e9db80b93357d7049002500f0865d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
703f3099977dca8d4367c1f180b677df76e9db80b93357d7049002500f0865d4.exe
Resource
win10v2004-20220812-en
General
-
Target
703f3099977dca8d4367c1f180b677df76e9db80b93357d7049002500f0865d4
-
Size
598KB
-
MD5
3003cdc2e37b4c789caf0d78785647e0
-
SHA1
353586a53fa937748e9f1d0755b90a5513d247a7
-
SHA256
703f3099977dca8d4367c1f180b677df76e9db80b93357d7049002500f0865d4
-
SHA512
9f1952f7fe9d75ae74369632980eeac65ee78eeea41c63e3bb8513bdb3eaa2b16b03eb6567a404b424d65010af9d3da660f2c4a859733ff1992c217274e15737
-
SSDEEP
6144:mcGqTK1Ne9raaoKo97uFKBVk7p+uNCEyZPcTrT5bUXo3nV6F/Q649nv9Eymunv+k:mc1K1Nl9iLp665DoVQ6iiMmt+1hZjV9
Malware Config
Signatures
Files
-
703f3099977dca8d4367c1f180b677df76e9db80b93357d7049002500f0865d4.exe windows x86
c3849817edb78ec812a5e6fd4845523e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
CopyImage
IsWindow
kernel32
GetProcessHeap
WaitForSingleObject
ActivateActCtx
CreateActCtxA
CreateThread
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
SetLastError
HeapDestroy
GetStringTypeW
lstrcmpW
GlobalUnlock
GetCurrentProcessId
DeleteFileA
GlobalLock
Sections
.text Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 671B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE