Static task
static1
Behavioral task
behavioral1
Sample
1179198b18e8961471bd6dc759221e88b625d94cf5c0ebb0f3114f79534f83b9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1179198b18e8961471bd6dc759221e88b625d94cf5c0ebb0f3114f79534f83b9.exe
Resource
win10v2004-20220812-en
General
-
Target
1179198b18e8961471bd6dc759221e88b625d94cf5c0ebb0f3114f79534f83b9
-
Size
804KB
-
MD5
0c7862530f652d2036d7dfab06ee5327
-
SHA1
6a66acb5e2a4243546cd5085120216e993c8d58d
-
SHA256
1179198b18e8961471bd6dc759221e88b625d94cf5c0ebb0f3114f79534f83b9
-
SHA512
58f46448a4a31fd541be6646c860327ea32ba1c874b53db0380dd09637176b8fd3bdb1153896795fa16dd81a289bd0c5da2f994d74c71b759f18e735fa343ee3
-
SSDEEP
24576:7WSE1aAtqwsrS+JkpO95rpJSXU77HNfwaZM59s:qXgwsX8QrEUHbZM3s
Malware Config
Signatures
Files
-
1179198b18e8961471bd6dc759221e88b625d94cf5c0ebb0f3114f79534f83b9.exe windows x86
110f4fb43fbcc2e06758bd383493cf94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetFileTime
CreateFileW
GetModuleFileNameA
CreateDirectoryA
SetFilePointer
GetCurrentThreadId
GetModuleHandleA
LeaveCriticalSection
OpenEventA
DeleteFileW
GetConsoleMode
GetFileAttributesA
GlobalFlags
GetVolumePathNameA
HeapDestroy
LocalFree
CreateFileW
PulseEvent
GetDriveTypeW
GetProcessHeap
VirtualProtect
OpenMutexA
DeleteFileW
FindAtomA
user32
GetSysColor
GetWindowLongA
wsprintfA
DispatchMessageA
GetWindowDC
GetWindowTextA
IsWindowEnabled
MessageBoxA
IsZoomed
GetWindowLongA
GetKeyState
LoadCursorA
PeekMessageA
dfsshlex
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllRegisterServer
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 793KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE