Static task
static1
Behavioral task
behavioral1
Sample
1bed2e8d7897bcfc2e2d3a8ce2d38537faaff1d546384b4cf13d08c5e5641f46.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1bed2e8d7897bcfc2e2d3a8ce2d38537faaff1d546384b4cf13d08c5e5641f46.exe
Resource
win10v2004-20220901-en
General
-
Target
1bed2e8d7897bcfc2e2d3a8ce2d38537faaff1d546384b4cf13d08c5e5641f46
-
Size
55KB
-
MD5
07c8d7789f7a28ec97115f78be660562
-
SHA1
2da4f5561bd5f0740d059c5de5b19cfe28ecb29d
-
SHA256
1bed2e8d7897bcfc2e2d3a8ce2d38537faaff1d546384b4cf13d08c5e5641f46
-
SHA512
d4c50ca066ad95d700b03a05be480e47634f143387ba337b7c1d8e10ad9ce0c51ed59145dd8b06a44e4d2a040559a47f0882b0fa558a98d8478b5b5e02437d9e
-
SSDEEP
1536:UGv6MjuaRPulw3Q37/cMZznQmxA/rREYP99hSEn:5ZjXYwA37/pbyREYhSE
Malware Config
Signatures
Files
-
1bed2e8d7897bcfc2e2d3a8ce2d38537faaff1d546384b4cf13d08c5e5641f46.exe windows x86
956026c4df5aa8b8a9693b94869e162c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetTimeFormatA
TlsGetValue
FindResourceW
VirtualQuery
CancelIo
GetCommandLineA
CloseHandle
HeapCreate
lstrlenA
DeleteFileW
CloseHandle
HeapDestroy
GetStartupInfoA
Sleep
GetVolumePathNameA
GetCommandLineA
GetEnvironmentVariableA
ResetEvent
GetModuleHandleA
user32
CallWindowProcA
PeekMessageA
IsZoomed
DrawTextW
DispatchMessageA
GetClassInfoA
FindWindowA
DispatchMessageA
GetWindowLongA
DestroyMenu
CreateIcon
IsWindow
GetSysColor
psbase
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
SPDeleteSubtype
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oirxhfp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE