Static task
static1
Behavioral task
behavioral1
Sample
be64e23d70ed959b85b29c9c0f44533d9564573a0a437a522b3099676cfb1938.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be64e23d70ed959b85b29c9c0f44533d9564573a0a437a522b3099676cfb1938.exe
Resource
win10v2004-20220812-en
General
-
Target
be64e23d70ed959b85b29c9c0f44533d9564573a0a437a522b3099676cfb1938
-
Size
190KB
-
MD5
03fabf894eb04cefdbc36f024286f270
-
SHA1
463d520c994165be9367f97b9826f9f13207aa11
-
SHA256
be64e23d70ed959b85b29c9c0f44533d9564573a0a437a522b3099676cfb1938
-
SHA512
b9b4c4edf139101d0a828a5253c8653c137c528dd155c7c13116c864e1c9829a31eda56173654762fa7ee3ca3d746363aa1a78effeb5c053c1ac3245e3871529
-
SSDEEP
3072:fQDSSST9ytqzmcWVCbUVAL2IbO+uJauO+gxlIXDtg3E4bKCYtKJU7k6lCp6hJ+fc:4f8tWXVaG+Q/E1ElZCwVSF
Malware Config
Signatures
Files
-
be64e23d70ed959b85b29c9c0f44533d9564573a0a437a522b3099676cfb1938.exe windows x86
4ecf8cccabed2c632e2819dd6b786b0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHOpenFolderAndSelectItems
SHGetDesktopFolder
DragQueryPoint
gdi32
StretchBlt
GetRasterizerCaps
CombineTransform
kernel32
WriteFile
_lread
lstrcpyA
GetStringTypeA
CancelIo
CreateRemoteThread
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetCommProperties
GetCommandLineA
GetCurrentProcess
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStringTypeW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetCommTimeouts
SetHandleCount
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
Sections
.text Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ