Static task
static1
Behavioral task
behavioral1
Sample
651849606caf734a95784439712cb01fb7797c8a1b6787dcb9cf327e595a4ade.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
651849606caf734a95784439712cb01fb7797c8a1b6787dcb9cf327e595a4ade.exe
Resource
win10v2004-20220812-en
General
-
Target
651849606caf734a95784439712cb01fb7797c8a1b6787dcb9cf327e595a4ade
-
Size
768KB
-
MD5
0f913c920b8a8f97657b4ad6bea1819f
-
SHA1
1e1768a221aaafb452fa335be7e2f91f3012fbe0
-
SHA256
651849606caf734a95784439712cb01fb7797c8a1b6787dcb9cf327e595a4ade
-
SHA512
2839bf52c089af0c6bb5e35290e834f536f060eaba8805a22a6b6d62001ea9c1676791672d08f1e7e17883443bf0b59c15a1e6264546c77ce87080f79dc60d7f
-
SSDEEP
12288:usk8v8BAbJnFvEpkuvqlHbAfaIrX6nIeloQmXH9WYb12E7I18TudNy:u1iHbfsoiulPmx12E7G86
Malware Config
Signatures
Files
-
651849606caf734a95784439712cb01fb7797c8a1b6787dcb9cf327e595a4ade.exe windows x86
bd38164334f00bd87da5b454df92beb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetVersion
GetCommandLineW
RemoveDirectoryW
HeapSize
GetDriveTypeA
Sleep
ResetEvent
CloseHandle
SetStdHandle
WriteFile
OpenEventW
GetModuleHandleA
WriteConsoleW
ReleaseSemaphore
CreateFileMappingW
VirtualProtectEx
lstrlenA
CreateFileA
ReleaseMutex
CreateMutexA
CloseHandle
CreateDirectoryW
DeleteFileA
RemoveDirectoryW
user32
FindWindowA
CreateIcon
IsWindow
DrawTextW
MessageBoxA
PeekMessageA
GetWindowLongA
DestroyMenu
GetClassInfoA
DispatchMessageA
IsZoomed
GetSysColor
DestroyMenu
eventcls
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ