Static task
static1
Behavioral task
behavioral1
Sample
2d7453acc17db00263670209c372628b86c345b4405c831c8c30fc75f265545a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2d7453acc17db00263670209c372628b86c345b4405c831c8c30fc75f265545a.exe
Resource
win10v2004-20220812-en
General
-
Target
2d7453acc17db00263670209c372628b86c345b4405c831c8c30fc75f265545a
-
Size
796KB
-
MD5
061c8842c1138e2588c451bdc7453af1
-
SHA1
9dd73822b773fe659717170a11e75211284e9133
-
SHA256
2d7453acc17db00263670209c372628b86c345b4405c831c8c30fc75f265545a
-
SHA512
52d20eeee340faa126f74f7cac9406cf9d6f0d6d351e6d314d2e16d984126f73155b2498d544ab919edce17bc661a1e18e3cbcf10adb9fac261911ced9fcd876
-
SSDEEP
24576:tvkEI3I0Rj0x8OsdU3/b6I+bv/Wp9bt4a:5kEL0mwvIM2bt4
Malware Config
Signatures
Files
-
2d7453acc17db00263670209c372628b86c345b4405c831c8c30fc75f265545a.exe windows x86
a43575ae5f8d769a77e9daa0963fdd52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
IsBadWritePtr
RemoveDirectoryA
GetFileAttributesA
FindResourceA
HeapSize
FindClose
CreateMailslotW
GetExitCodeThread
GetCommandLineA
CreateDirectoryA
GetDriveTypeW
GetStdHandle
CancelIo
SetLastError
MapViewOfFile
ReleaseMutex
GetLocaleInfoA
GetProcessHeap
ResetEvent
user32
GetWindowTextW
LoadImageW
LoadCursorA
PeekMessageA
SetCursor
DispatchMessageA
DestroyMenu
PostMessageW
GetWindowLongW
wsprintfA
IsDialogMessageA
GetCapture
SetFocus
ipsmsnap
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ