Static task
static1
Behavioral task
behavioral1
Sample
208f3f995e7bd25dd7f253e38e0885bef0827bf1963fe9157f942fb36c250425.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
208f3f995e7bd25dd7f253e38e0885bef0827bf1963fe9157f942fb36c250425.exe
Resource
win10v2004-20220901-en
General
-
Target
208f3f995e7bd25dd7f253e38e0885bef0827bf1963fe9157f942fb36c250425
-
Size
304KB
-
MD5
087df1bd07605bbadcfd2c00a4e36a21
-
SHA1
5e551de39909f4460ac0c2cd51e99443ebb38ac0
-
SHA256
208f3f995e7bd25dd7f253e38e0885bef0827bf1963fe9157f942fb36c250425
-
SHA512
4ba84553daa3788b084ff72e4979a2a5ff0734bb433493aa9b0dff15fde40f142709aa6505de963bde5ad724b9653534d6f374baefc331023f1e04bddf0a27c1
-
SSDEEP
6144:nCapMeXS0SZR76hBGloCK9o+gw3T2etmGqk4BkurCkyS2SL99rLzaQbb4T3U:SejGrKNdT28mGd1k2mLg3U
Malware Config
Signatures
Files
-
208f3f995e7bd25dd7f253e38e0885bef0827bf1963fe9157f942fb36c250425.exe windows x86
06c5ecca26cdad42e2a9b790b0a67b91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FindAtomA
GetFileAttributesA
HeapDestroy
lstrlenA
ExitProcess
GetPriorityClass
IsDebuggerPresent
GetPrivateProfileIntA
GetComputerNameA
LoadLibraryA
VirtualAlloc
ResumeThread
GetModuleHandleW
ResetEvent
GetSystemTime
MapViewOfFile
CreateFileMappingA
GetCommandLineA
LocalFree
user32
GetMenu
FillRect
CloseWindow
GetCaretPos
DrawStateA
GetClientRect
GetDlgItem
GetClassInfoA
CallWindowProcA
CreateWindowExA
EndDialog
DestroyCaret
DispatchMessageA
ntshrui
IsPathSharedW
GetLocalPathFromNetResourceA
IsFolderPrivateForUser
IsPathSharedA
GetNetResourceFromLocalPathA
comuid
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ