Static task
static1
Behavioral task
behavioral1
Sample
8941bb7f4abb3eefa5c4a6181fe05dc31522544a0411f092672f39310dff8e39.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8941bb7f4abb3eefa5c4a6181fe05dc31522544a0411f092672f39310dff8e39.exe
Resource
win10v2004-20221111-en
General
-
Target
8941bb7f4abb3eefa5c4a6181fe05dc31522544a0411f092672f39310dff8e39
-
Size
365KB
-
MD5
028b778e9dbe9346dce2038035f6d42f
-
SHA1
76519434c616107236e71899376b0976e19e0a88
-
SHA256
8941bb7f4abb3eefa5c4a6181fe05dc31522544a0411f092672f39310dff8e39
-
SHA512
135575c80aff517a5fa0bbe99709526ce17501248136cfc0f38a452a62ac034a2ac0040cbee1828e3c6d7b75fbdc782e875868f9d026a15cd557e7b4ceb55bd0
-
SSDEEP
6144:cf7BvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmNV:cB5j3CcxR0e7Uc7MOJIP1WGzUdNiCoj+
Malware Config
Signatures
Files
-
8941bb7f4abb3eefa5c4a6181fe05dc31522544a0411f092672f39310dff8e39.exe windows x86
a6dba947b6bbc348318b1988866f26be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
CreateFileA
GlobalFree
CreateProcessA
TlsGetValue
GetACP
FindClose
ReleaseMutex
ExitThread
CloseHandle
HeapCreate
GlobalUnlock
GetTickCount
PulseEvent
DeleteAtom
SetLastError
CreateMutexA
GetModuleHandleA
GetEnvironmentVariableA
FindResourceA
user32
CallWindowProcA
DefWindowProcW
IsWindow
DrawMenuBar
CheckRadioButton
GetIconInfo
GetDC
CopyRect
DrawEdge
SetFocus
GetDlgItem
DispatchMessageA
FillRect
msasn1
ASN1BERDecBool
ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncEoid
ASN1BEREncBool
dpnet
DirectPlay8Create
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ