Static task
static1
Behavioral task
behavioral1
Sample
92bde655e85146e4ac5e6bd7cca49a318e70f555c81a47779abe365811479a6b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
92bde655e85146e4ac5e6bd7cca49a318e70f555c81a47779abe365811479a6b.exe
Resource
win10v2004-20221111-en
General
-
Target
92bde655e85146e4ac5e6bd7cca49a318e70f555c81a47779abe365811479a6b
-
Size
124KB
-
MD5
3f68d0e2927d70fd2c4ddb18d764cf0f
-
SHA1
b16e53aad85d6d956b37fede483dd5e6250f7304
-
SHA256
92bde655e85146e4ac5e6bd7cca49a318e70f555c81a47779abe365811479a6b
-
SHA512
60c6c3d407bde71b489cfd692c5d9978ac17e8142ef49a633bab1e9463deac02e36bad732e4d251560bf71d7123bcf125139a5aa984b893eee5d031071da64e9
-
SSDEEP
3072:U/5pi/KQ314KtYpD5h3AxU0SNFXh+Qv0uWEG/qjdkeTslf2+ZcabI:W5h3AxU0SBdUbq0l3ia
Malware Config
Signatures
Files
-
92bde655e85146e4ac5e6bd7cca49a318e70f555c81a47779abe365811479a6b.exe windows x86
8475d92633e382448add7903aeb88b01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
SetLastError
GetModuleHandleA
GetFileAttributesA
TlsGetValue
CreateDirectoryW
MapViewOfFile
GetTickCount
GetExitCodeThread
RemoveDirectoryW
GetCurrentProcess
FindClose
IsValidCodePage
HeapSize
GetFileAttributesA
IsBadWritePtr
FindResourceA
LocalLock
VirtualProtect
GetStringTypeA
GetLocaleInfoA
user32
PeekMessageW
IsDialogMessageA
PostMessageW
DispatchMessageA
GetWindowLongW
LoadImageW
SetFocus
LoadCursorA
wsprintfW
LoadStringA
SetCursor
IsWindow
GetWindowTextW
msctf
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
TF_InitSystem
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE