Static task
static1
Behavioral task
behavioral1
Sample
2baa56cd618a75ac19c24e34a1aa15a1a0fbf7f5447fb5c2df467e0a16bd251e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2baa56cd618a75ac19c24e34a1aa15a1a0fbf7f5447fb5c2df467e0a16bd251e.exe
Resource
win10v2004-20220812-en
General
-
Target
2baa56cd618a75ac19c24e34a1aa15a1a0fbf7f5447fb5c2df467e0a16bd251e
-
Size
306KB
-
MD5
0d397bc08c928d8b9afcadec0754e4d0
-
SHA1
a7a9dc462bc9a3a71afb87a7c9aacfd1ad331da5
-
SHA256
2baa56cd618a75ac19c24e34a1aa15a1a0fbf7f5447fb5c2df467e0a16bd251e
-
SHA512
6744f4ddda705a385ffda54f57f781478b483f5108e202c154d7425093184d9c4b1bcb90d49115c114bb586e2f732916970dfe4fba44334ad9a88f0950423009
-
SSDEEP
6144:oRDWnLytf/GqB94UN2+fKCoU5ZbtYMol1L9n+r6BRJlT3:VLTqbY+fh3tYMG1LxH7T3
Malware Config
Signatures
Files
-
2baa56cd618a75ac19c24e34a1aa15a1a0fbf7f5447fb5c2df467e0a16bd251e.exe windows x86
5bc58c4c35c3af9067d5aa39defb2771
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
GetDriveTypeW
CreateDirectoryW
GetCurrentProcess
HeapFree
SetLastError
GetFileAttributesA
LocalLock
GetFileAttributesA
VirtualProtect
IsBadWritePtr
MapViewOfFile
TlsGetValue
FindClose
GetExitCodeThread
IsValidCodePage
FindResourceW
GetTickCount
GetModuleHandleA
RemoveDirectoryW
GetLocaleInfoW
user32
PostMessageW
IsDialogMessageA
DispatchMessageA
GetWindowLongW
wsprintfW
LoadCursorA
PeekMessageW
LoadStringW
GetWindowTextW
SetFocus
LoadImageW
SetCursor
IsWindow
msctf
DllUnregisterServer
DllUnregisterServer
TF_InitSystem
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE