Static task
static1
Behavioral task
behavioral1
Sample
1a1e5e7c18710f542a5170a6851624d92d68c5cbdc48b9e14712df77fa9525f6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1a1e5e7c18710f542a5170a6851624d92d68c5cbdc48b9e14712df77fa9525f6.exe
Resource
win10v2004-20220812-en
General
-
Target
1a1e5e7c18710f542a5170a6851624d92d68c5cbdc48b9e14712df77fa9525f6
-
Size
301KB
-
MD5
1dadacc36d5c7a705c6984916cd698f0
-
SHA1
7b9ee3262715b3e71d4ad2577e7e9c8b9e8e2d55
-
SHA256
1a1e5e7c18710f542a5170a6851624d92d68c5cbdc48b9e14712df77fa9525f6
-
SHA512
8f02f421eb8b286c3dba6efd0275d160906260640f4f461d6b95c4917d9c0b6284cc1a8102a0e081a079a6ac678033dc19e00fd9abfa8921512070f11060db57
-
SSDEEP
6144:HWn/mx7ajRH4NK6P2W86a28FeSJ0mJhg6WKszH97GyD:2M2jGNp+WnEFJvbg6aLp5
Malware Config
Signatures
Files
-
1a1e5e7c18710f542a5170a6851624d92d68c5cbdc48b9e14712df77fa9525f6.exe windows x86
a2de76554603725745a10e8f4c5ceb2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoA
GetStringTypeA
GetExitCodeThread
GetFileAttributesA
GetModuleHandleA
RemoveDirectoryW
HeapSize
GetTickCount
CreateDirectoryW
IsBadWritePtr
TlsGetValue
GetFileAttributesA
VirtualProtect
FindClose
MapViewOfFile
FindResourceA
LocalLock
IsValidCodePage
GetDriveTypeW
GetCurrentProcess
SetLastError
user32
GetWindowTextW
wsprintfW
GetWindowLongW
DispatchMessageA
GetCapture
IsDialogMessageA
PostMessageW
LoadCursorA
PeekMessageW
IsWindow
LoadImageW
SetFocus
SetCursor
msaatext
DllCanUnloadNow
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE