Static task
static1
Behavioral task
behavioral1
Sample
f1c6278ff1ff05ece5c9276bea08ee809fb8490301ebccd35923cebfaabbc5d8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f1c6278ff1ff05ece5c9276bea08ee809fb8490301ebccd35923cebfaabbc5d8.exe
Resource
win10v2004-20220812-en
General
-
Target
f1c6278ff1ff05ece5c9276bea08ee809fb8490301ebccd35923cebfaabbc5d8
-
Size
811KB
-
MD5
0da842863111caa5fbf97b3e26be6ff9
-
SHA1
9e617d45ff23d4fa3efce652976e577222882ffc
-
SHA256
f1c6278ff1ff05ece5c9276bea08ee809fb8490301ebccd35923cebfaabbc5d8
-
SHA512
79763e4fb015d87153d3913a1fe93616b0903d68da085c396a50c1fc677d89b0c7007e2c751741dfc28dc916784f38b09a5b731c6c7038e79f04d56166265c91
-
SSDEEP
24576:2GQogjSpCk6G+o7fHf/Rom6VUVTZTVdTZ7JVds:yOpkG+o7f/6VuvRJVds
Malware Config
Signatures
Files
-
f1c6278ff1ff05ece5c9276bea08ee809fb8490301ebccd35923cebfaabbc5d8.exe windows x86
128eb4cd540910afe1303f6f603e9f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
VirtualProtect
SetLastError
DeleteFileA
Sleep
GetProcessHeap
WriteConsoleA
GetModuleFileNameA
SetLocalTime
CreateFileA
LoadLibraryA
SetEvent
GetFileSize
OpenSemaphoreA
GetStartupInfoA
GetFileAttributesW
lstrlenA
ReadConsoleA
SetLastError
GlobalFree
GetEnvironmentStringsA
CreateSemaphoreW
GetTickCount
HeapSize
CreateDirectoryW
user32
CallWindowProcW
DrawTextW
DispatchMessageA
DestroyMenu
FindWindowA
PeekMessageA
SetFocus
GetSysColor
GetClassInfoA
DispatchMessageA
IsZoomed
GetWindowLongA
IsWindow
xmlprovi
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
advapi32
RegCloseKey
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE