Static task
static1
Behavioral task
behavioral1
Sample
d6718238cacab6000a412716b0265a3aadeba95e83203bfc9ef85f1cc6bd1641.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6718238cacab6000a412716b0265a3aadeba95e83203bfc9ef85f1cc6bd1641.exe
Resource
win10v2004-20221111-en
General
-
Target
d6718238cacab6000a412716b0265a3aadeba95e83203bfc9ef85f1cc6bd1641
-
Size
797KB
-
MD5
53d549f478bffad742f3a9c34095feb9
-
SHA1
6ebd3e1021eec363811d7e0a4801981fd567ef0b
-
SHA256
d6718238cacab6000a412716b0265a3aadeba95e83203bfc9ef85f1cc6bd1641
-
SHA512
aa415251f3893ae3a5d18b25d97dc89d1195e2028b1ea2e9439ebb8769d3be67f4d470918b0e472b8e4d228752d5f5ce2f9c36e0eac821491addc07978b6ced9
-
SSDEEP
12288:OxiueNZqukrzTGjDWjTC6pZhxivYRo6mTl9CYXy+5+poNag4D/t9Nm:ciuePk/TGjKjTdwQo6mTXCoyh79Nm
Malware Config
Signatures
Files
-
d6718238cacab6000a412716b0265a3aadeba95e83203bfc9ef85f1cc6bd1641.exe windows x86
315b91b978fcf6ef723085f4b314ffea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CancelIo
SetLastError
HeapSize
GetCommandLineA
GetStdHandle
RemoveDirectoryA
MapViewOfFile
GetDriveTypeW
GetProcessHeap
SetLocalTime
GetFileAttributesA
GetModuleHandleA
DeleteFileA
IsBadWritePtr
ReleaseMutex
GetLocaleInfoA
CreateMailslotA
VirtualProtect
ResetEvent
WriteFile
CreateDirectoryA
user32
DestroyMenu
GetWindowLongW
GetCaretPos
SetCursor
DispatchMessageA
GetCapture
wsprintfA
GetWindowTextW
SetFocus
PostMessageW
LoadCursorA
PeekMessageA
LoadImageA
filemgmt
DllRegisterServer
DllUnregisterServer
DllRegisterServer
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 790KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ