Static task
static1
Behavioral task
behavioral1
Sample
2afd9adec00766ff72db1bc3c0b4acfc583a98c52386be85c52f513a9d336fce.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2afd9adec00766ff72db1bc3c0b4acfc583a98c52386be85c52f513a9d336fce.exe
Resource
win10v2004-20220812-en
General
-
Target
2afd9adec00766ff72db1bc3c0b4acfc583a98c52386be85c52f513a9d336fce
-
Size
137KB
-
MD5
07f4d0ba38967e51e050167de16e83ee
-
SHA1
6f2c9a18c9d2f7cf15a8f05bc158823a21c821da
-
SHA256
2afd9adec00766ff72db1bc3c0b4acfc583a98c52386be85c52f513a9d336fce
-
SHA512
1500feef9ac2cf789e33bb77f37f464321d8d81a3faaf660af36d1dc31b251e201effdd23dce6638a381cc14877a71fbb05615332b31b0637b065c0f354fb168
-
SSDEEP
1536:x1UOgFvEuzmmjtTjjn4r1BiYcjKsrtoVS+E8PZygQ/hgF0T5JnUiO:xmhxEuachjsr1itoml/huuU9
Malware Config
Signatures
Files
-
2afd9adec00766ff72db1bc3c0b4acfc583a98c52386be85c52f513a9d336fce.exe windows x86
23246f2da6cf648f65b244a8e900f70c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetDiskFreeSpaceA
FindClose
VirtualProtect
SetEvent
CreateThread
FindAtomA
GetCalendarInfoA
DeleteCriticalSection
SearchPathA
ExitProcess
GetLastError
FindVolumeClose
GetTickCount
FindResourceExA
Sleep
CloseHandle
TlsGetValue
ReleaseMutex
lstrlenA
user32
GetKeyState
CreateMenu
GetMessageA
CopyImage
EnableWindow
IsIconic
CloseWindow
CreateWindowExA
DispatchMessageA
GetScrollBarInfo
DialogBoxParamA
DragDetect
EndDialog
GetUpdateRect
msdmo
DMOEnum
DMORegister
DMOGetName
DMOUnregister
DMOGetTypes
advapi32
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 129KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xetqebc Size: - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE