Static task
static1
Behavioral task
behavioral1
Sample
2ca7f50467886f7b0cb10da83e4fb239f11c63cd068f9b05c18655509b3b451f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ca7f50467886f7b0cb10da83e4fb239f11c63cd068f9b05c18655509b3b451f.exe
Resource
win10v2004-20220812-en
General
-
Target
2ca7f50467886f7b0cb10da83e4fb239f11c63cd068f9b05c18655509b3b451f
-
Size
801KB
-
MD5
20002d8760a70400f84dbf10a96e6b92
-
SHA1
f417d45697e34d7cd35c732ecc895d4ad3ed1265
-
SHA256
2ca7f50467886f7b0cb10da83e4fb239f11c63cd068f9b05c18655509b3b451f
-
SHA512
fff497e9c056ca11990a3858976c438e89c3f856b9c992bb580e938a913fda430ec252ee435db593a582d3e709a37942ebac2db34c5efdb50a2644e8b235dd54
-
SSDEEP
24576:bMZ20ioQnf/mM71opSzOYXJ6MgYrxDf+:oZFMeM7qSzHXJF9r+
Malware Config
Signatures
Files
-
2ca7f50467886f7b0cb10da83e4fb239f11c63cd068f9b05c18655509b3b451f.exe windows x86
4d658d85175bf31b5017de671998dd06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoW
LeaveCriticalSection
GetExitCodeProcess
GetModuleHandleA
lstrcpyA
IsBadWritePtr
SetFileTime
CloseHandle
HeapCreate
HeapSize
CreateEventA
InterlockedExchange
LoadLibraryA
lstrcatA
GetFileSize
SetFileTime
InitializeCriticalSection
GetLastError
ReadFile
FormatMessageW
SetFileTime
mstscax
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
shell32
DragQueryFileA
SHFree
ShellMessageBoxW
SHGetDiskFreeSpaceA
ShellAboutA
DllUnregisterServer
DuplicateIcon
DragFinish
StrChrA
SHGetMalloc
DragAcceptFiles
ExtractIconA
SHGetSettings
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 787KB - Virtual size: 786KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ