Static task
static1
Behavioral task
behavioral1
Sample
323fcd79732ba992b937583221a60d0c7126d7260cc0bc803a5c550a3b9617ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
323fcd79732ba992b937583221a60d0c7126d7260cc0bc803a5c550a3b9617ad.exe
Resource
win10v2004-20220812-en
General
-
Target
323fcd79732ba992b937583221a60d0c7126d7260cc0bc803a5c550a3b9617ad
-
Size
338KB
-
MD5
060f2142f9ec34c7f299c5660f4c9c10
-
SHA1
1054a0c081eb0679e13d0a1ff41654aa5e11fb1d
-
SHA256
323fcd79732ba992b937583221a60d0c7126d7260cc0bc803a5c550a3b9617ad
-
SHA512
e254ca091cf69735b1d9ef694409c3b200724ca601bc63a6c831e18c0aa89c25939aa62d85339302acf37d64bcfaae9ac1a57d9a196d2133ed6353b3b8044fd8
-
SSDEEP
6144:/EauZm3dRxdap46Yx8Xv0YO53PAxl8jdBHN0leYTFgiJ0U3Z:/Ea0m3drd8c8/xIQ8jntyec0Up
Malware Config
Signatures
Files
-
323fcd79732ba992b937583221a60d0c7126d7260cc0bc803a5c550a3b9617ad.exe windows x86
e79c9d7377b134327b5d763c459255c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
GetClientRect
EndPaint
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
GetWindowRect
kernel32
CreateFileA
HeapAlloc
GetProcessHeap
GetProcAddress
GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FormatMessageA
FindClose
CreateFileMappingA
HeapCreate
GetFileSize
FindNextFileA
DeleteFileA
GetACP
GetCPInfo
GetLogicalDriveStringsA
GetModuleFileNameA
GetCurrentThreadId
GetStdHandle
GetOEMCP
GetFileType
HeapFree
GetCurrentProcess
GetCurrentProcessId
CloseHandle
gdi32
CreateFontIndirectA
DeleteObject
Sections
.text Size: 331KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ