Static task
static1
Behavioral task
behavioral1
Sample
42dbbd1e660834b21fcc4faead1210153f74f916e77776d91d2acc315809dc4c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42dbbd1e660834b21fcc4faead1210153f74f916e77776d91d2acc315809dc4c.exe
Resource
win10v2004-20221111-en
General
-
Target
42dbbd1e660834b21fcc4faead1210153f74f916e77776d91d2acc315809dc4c
-
Size
299KB
-
MD5
c57431f3c395502e19b1cb87071eda6e
-
SHA1
eb8a38a0b1771b0d04b596322202e658f347e5dc
-
SHA256
42dbbd1e660834b21fcc4faead1210153f74f916e77776d91d2acc315809dc4c
-
SHA512
143b005e4f9e3fd2c6202ab0352185f7f05033b3c1e0107bcf14261b0d27dd24bdbaa9323c5c070fc29d53dee0409686dcf4c967aa76754e4488d61f57b51e08
-
SSDEEP
6144:gLeMKnkOEGnsfDLMB3P84lTQbxpwmrBGRmPG9rgqX2:aeMnprghP84+dpwABGRQqrLm
Malware Config
Signatures
Files
-
42dbbd1e660834b21fcc4faead1210153f74f916e77776d91d2acc315809dc4c.exe windows x86
e56c6ec3f5e4157b68b8da7e066815ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
CloseHandle
GetModuleHandleA
SetEvent
CopyFileW
HeapCreate
ReleaseMutex
GetFileAttributesA
WriteConsoleW
WriteConsoleW
GetPriorityClass
GetStartupInfoA
IsBadCodePtr
WriteConsoleW
lstrlenW
GetCurrentDirectoryA
DisconnectNamedPipe
IsValidLocale
CreatePipe
IsBadStringPtrA
lstrcpyW
msftedit
SetCustomTextOutHandlerEx
RichEditWndProc
RichListBoxWndProc
RichComboBoxWndProc
shell32
SHGetDiskFreeSpaceA
SHGetMalloc
SHGetDiskFreeSpaceA
ExtractIconA
SHGetSettings
ShellAboutA
SHGetMalloc
ShellMessageBoxA
StrChrA
DragAcceptFiles
DragQueryFileA
DuplicateIcon
ShellMessageBoxA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ