Static task
static1
Behavioral task
behavioral1
Sample
1fa2605f1c7c018477f4d785e0f709eb41b007c53fdcc81342dface9b590b6dc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1fa2605f1c7c018477f4d785e0f709eb41b007c53fdcc81342dface9b590b6dc.exe
Resource
win10v2004-20220812-en
General
-
Target
1fa2605f1c7c018477f4d785e0f709eb41b007c53fdcc81342dface9b590b6dc
-
Size
301KB
-
MD5
0d38fc262de04e9ef52bd26b3b066f3d
-
SHA1
379e20b29b7360f46fe81281d555db9b8e7bae99
-
SHA256
1fa2605f1c7c018477f4d785e0f709eb41b007c53fdcc81342dface9b590b6dc
-
SHA512
7be4314b63c330d9a0acfb6c116720fb37867e61060c1e65db4abe569739e752642ea668eb56ca771303df87e722f8f1ef500f7daa411c96ad47790fddea3d35
-
SSDEEP
6144:6SJc2RbV18X5Jo0Azz0nRixjWBotLVFIYoE6+Nc1k:lJc2NVFEn8VKN
Malware Config
Signatures
Files
-
1fa2605f1c7c018477f4d785e0f709eb41b007c53fdcc81342dface9b590b6dc.exe windows x86
b481ae45fbbbadf8128c7b25c0bd6e34
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtect
GetLocaleInfoA
ResetEvent
SetLastError
HeapSize
WriteFile
RemoveDirectoryA
GetDriveTypeW
IsBadWritePtr
GetModuleHandleA
CancelIo
GetProcessHeap
CreateDirectoryA
ReadConsoleW
ReleaseMutex
GetStdHandle
GetFileAttributesA
SetLocalTime
DeleteFileA
CreateMailslotA
GetCommandLineA
user32
DrawIcon
GetCaretPos
LoadCursorA
DispatchMessageA
PeekMessageA
SetCursor
SetFocus
PostMessageW
GetCapture
DestroyMenu
GetWindowLongW
wsprintfA
GetWindowTextW
filemgmt
DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ