Static task
static1
Behavioral task
behavioral1
Sample
41ddf7585f39b6b9e7919ff4b788f31744e95a0afef7eead46164a9e8b8c9da1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
41ddf7585f39b6b9e7919ff4b788f31744e95a0afef7eead46164a9e8b8c9da1.exe
Resource
win10v2004-20220812-en
General
-
Target
41ddf7585f39b6b9e7919ff4b788f31744e95a0afef7eead46164a9e8b8c9da1
-
Size
301KB
-
MD5
cca597e426209a0373c5b8745c3a7216
-
SHA1
8ef0d72ed3e3e2257edb7de2f3c2aef2d55491f1
-
SHA256
41ddf7585f39b6b9e7919ff4b788f31744e95a0afef7eead46164a9e8b8c9da1
-
SHA512
82ba50788ceae87ba1898aba135089eacf617356002f9f357a77f4cce632496f6e4e4e6c0df4133e06c2d4fdd02563649e5453ce67b056c19e2da0ea82cc3e4f
-
SSDEEP
6144:G/Wn+55zf3baKml6ZVhrakPIJPwINJxdWbMcFi:rcLalLPwINLdWbM
Malware Config
Signatures
Files
-
41ddf7585f39b6b9e7919ff4b788f31744e95a0afef7eead46164a9e8b8c9da1.exe windows x86
2f06873cb7b14b9871f277e51e040b94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetExitCodeThread
FindClose
CreateDirectoryW
VirtualProtect
GetStringTypeA
GetTickCount
RemoveDirectoryW
GetFileAttributesA
FindResourceW
TlsGetValue
LocalLock
GetDriveTypeW
GetCurrentProcess
GetLocaleInfoW
HeapFree
IsValidCodePage
SetLastError
IsBadWritePtr
MapViewOfFile
GetFileAttributesA
user32
GetWindowLongW
PostMessageW
DispatchMessageA
LoadImageW
IsWindow
LoadStringA
wsprintfW
LoadCursorA
PeekMessageW
SetFocus
IsDialogMessageA
SetCursor
GetWindowTextW
msctf
DllUnregisterServer
DllUnregisterServer
TF_InitSystem
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE