Static task
static1
Behavioral task
behavioral1
Sample
294cb4964f1707efc0089843bd1aca353b6fd0e4f83e1878a0af3c5c40c4a149.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
294cb4964f1707efc0089843bd1aca353b6fd0e4f83e1878a0af3c5c40c4a149.exe
Resource
win10v2004-20220901-en
General
-
Target
294cb4964f1707efc0089843bd1aca353b6fd0e4f83e1878a0af3c5c40c4a149
-
Size
797KB
-
MD5
0f0b0fda915856270d7cdf9145ea93c1
-
SHA1
ddbf1a41f0c2d6200618e05781d57a842209ecd7
-
SHA256
294cb4964f1707efc0089843bd1aca353b6fd0e4f83e1878a0af3c5c40c4a149
-
SHA512
c5fceaf4607ae6f456db107d17a26d135807c30a5e581eefd3945b53bc389e53632223998b824aaa223596c333b678b233f71f3d0e7dd26b0d0d67b3e46f89fa
-
SSDEEP
24576:3r3ug+VuAVGZaRodIqYu9A4T9Thbo+oo:3re3uAVpRo55Fbog
Malware Config
Signatures
Files
-
294cb4964f1707efc0089843bd1aca353b6fd0e4f83e1878a0af3c5c40c4a149.exe windows x86
70dd9af7dec15a02d8463dd957b1d678
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryA
FindClose
GetModuleHandleA
SetLastError
GetFileAttributesA
CreateMailslotW
GetLocaleInfoA
IsBadWritePtr
GetProcessHeap
ResetEvent
GetFileAttributesA
MapViewOfFile
CancelIo
GetDriveTypeW
HeapSize
VirtualProtect
GetExitCodeThread
IsValidCodePage
FindResourceA
GetTickCount
RemoveDirectoryA
user32
wsprintfA
GetWindowLongW
GetWindowTextW
IsWindow
SetFocus
PostMessageW
DispatchMessageA
IsDialogMessageA
LoadImageW
GetCapture
PeekMessageA
LoadCursorA
SetCursor
ipsmsnap
DllCanUnloadNow
DllGetClassObject
DllGetClassObject
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE