Static task
static1
Behavioral task
behavioral1
Sample
070da7f9a00455ca053b42684c4ae51d4620418ea613ac19757e925ea3d146fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
070da7f9a00455ca053b42684c4ae51d4620418ea613ac19757e925ea3d146fe.exe
Resource
win10v2004-20220812-en
General
-
Target
070da7f9a00455ca053b42684c4ae51d4620418ea613ac19757e925ea3d146fe
-
Size
67KB
-
MD5
0f7c51ddbc01bd18aedd01c8fac00476
-
SHA1
0d40f7e697519ed4fa43b9883af3c41afbce647e
-
SHA256
070da7f9a00455ca053b42684c4ae51d4620418ea613ac19757e925ea3d146fe
-
SHA512
4608fa5f9d64f10668f1ea41259a36aabb3a404db249e94bf4bd8d2f29acdc82b64fde6d8238418883fee609f7096e5ff1987f1de89955b1df098dd80007db9a
-
SSDEEP
1536:7DcVoqMhQKrJfGHDOTtDyY2rcrNtK+HULb0rJcS:8VoqMhQKlfGHMt+YN3lU0j
Malware Config
Signatures
Files
-
070da7f9a00455ca053b42684c4ae51d4620418ea613ac19757e925ea3d146fe.exe windows x86
5d4063f51b177a7fb4dc978d0599ebf6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
HeapCreate
GetModuleHandleA
ClearCommBreak
CloseHandle
SetEvent
IsDebuggerPresent
CreatePipe
ReleaseMutex
GetFileAttributesA
DisconnectNamedPipe
WriteConsoleW
GetStartupInfoA
GetLastError
lstrcpyW
WriteConsoleW
lstrlenW
GetCurrentDirectoryA
CopyFileW
WriteConsoleW
GetPriorityClass
msftedit
RichListBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
shell32
SHGetMalloc
ExtractIconA
ShellMessageBoxA
DllUnregisterServer
DuplicateIcon
SHGetSettings
StrChrA
DragFinish
SHGetDiskFreeSpaceA
DragAcceptFiles
ShellAboutA
SHFree
DragQueryFileA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ