Static task
static1
Behavioral task
behavioral1
Sample
33c4d441d84aba6e2038316eb0b540d8ded507f5a312e1216589b73dd8b36df9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33c4d441d84aba6e2038316eb0b540d8ded507f5a312e1216589b73dd8b36df9.exe
Resource
win10v2004-20221111-en
General
-
Target
33c4d441d84aba6e2038316eb0b540d8ded507f5a312e1216589b73dd8b36df9
-
Size
870KB
-
MD5
686fe423945b719721f13a835ee1a38a
-
SHA1
358927f38e99d6c5c0268429895204065a3ea6ab
-
SHA256
33c4d441d84aba6e2038316eb0b540d8ded507f5a312e1216589b73dd8b36df9
-
SHA512
be560783f900257b32ec4502eaa1b3058a7fdcde4c31c296bf87d747f86d91ab8cbebea7615376eb6cd98a6eed188f2b54b44de1228f506f6ea3e7b93068e3d7
-
SSDEEP
12288:rlOlBdhkk+9FdK+uSQ/WhnZG8o2cI01u02zF7Z2copAEzY/ERUxvAN3:s/F0FpQ/Whn9o2lCPp9p1zYsRH
Malware Config
Signatures
Files
-
33c4d441d84aba6e2038316eb0b540d8ded507f5a312e1216589b73dd8b36df9.exe windows x86
90ff3e7bd9a1d7ac1a5d535741c90d94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
ReleaseMutex
DeleteFileA
CreateFileMappingA
DeviceIoControl
GetACP
IsBadStringPtrA
GetModuleFileNameW
Sleep
CreateFileA
HeapCreate
SuspendThread
PulseEvent
GetModuleHandleA
GetStartupInfoA
lstrlenA
TlsGetValue
GetDriveTypeA
TlsAlloc
GetFileAttributesA
user32
DestroyWindow
PeekMessageA
GetIconInfo
DrawTextW
DispatchMessageA
LoadImageA
IsWindow
IsZoomed
FindWindowW
DispatchMessageA
CallWindowProcW
DestroyMenu
GetWindowLongA
asycfilt
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
cryptui
WizardFree
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 863KB - Virtual size: 862KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ