Static task
static1
Behavioral task
behavioral1
Sample
10ec2c63957b920ac1fe4c44e500bda2d9064b0d091c2cd14f06556d3e841043.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
10ec2c63957b920ac1fe4c44e500bda2d9064b0d091c2cd14f06556d3e841043.exe
Resource
win10v2004-20220812-en
General
-
Target
10ec2c63957b920ac1fe4c44e500bda2d9064b0d091c2cd14f06556d3e841043
-
Size
293KB
-
MD5
f8c80ce514181ace2f87acab9f268752
-
SHA1
e25bcbadb456436761ac5146b4f6d68a3c5d73ae
-
SHA256
10ec2c63957b920ac1fe4c44e500bda2d9064b0d091c2cd14f06556d3e841043
-
SHA512
97290ee59e375619ecb97756db4a0e4e3b074a6026d5afddd072aa811883c31f7eef0c8768d2ec06feea7e825db98bf3f49012c8be48d06e6e2583ee1f8c90ec
-
SSDEEP
6144:7JXo7+aC6xQseNBJZJ5/ahwoLtg2t5N6whHJ6Pp4tdCMgqFmMiW:7JY7+WmsiBDaWOg2t5Ewhp6PpgcFimMd
Malware Config
Signatures
Files
-
10ec2c63957b920ac1fe4c44e500bda2d9064b0d091c2cd14f06556d3e841043.exe windows x86
f5151f6ed42ef4e8e7bf2d464d8f1ca9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
FlushInstructionCache
FindAtomW
GetLocaleInfoW
InitializeCriticalSection
GetComputerNameW
GetProcessId
WaitForMultipleObjects
GlobalAlloc
OpenProcess
InterlockedExchange
LocalAlloc
InterlockedDecrement
lstrcmpW
FormatMessageW
GlobalLock
GetSystemDirectoryW
HeapSetInformation
GetModuleFileNameW
lstrlenA
MulDiv
RaiseException
WaitForSingleObject
LeaveCriticalSection
MultiByteToWideChar
CloseHandle
EnumResourceLanguagesW
EnterCriticalSection
GetStringTypeW
GlobalFree
ProcessIdToSessionId
GetCurrentProcess
CreateThread
GlobalUnlock
lstrlenW
GetTickCount
DeleteCriticalSection
CreateFileW
InterlockedIncrement
Sleep
GlobalHandle
SetLastError
WideCharToMultiByte
oleacc
CreateStdAccessibleObject
shlwapi
StrRetToStrA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathAppendA
PathIsFileSpecA
PathCreateFromUrlW
Sections
.text Size: 150KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ