Static task
static1
Behavioral task
behavioral1
Sample
205f5576f7f7cb641fa5182dac92b34367240f22f3877805ff34f945daaccb0e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
205f5576f7f7cb641fa5182dac92b34367240f22f3877805ff34f945daaccb0e.exe
Resource
win10v2004-20220812-en
General
-
Target
205f5576f7f7cb641fa5182dac92b34367240f22f3877805ff34f945daaccb0e
-
Size
31KB
-
MD5
7f4cbadb0f09b22f1cde44511e0792d3
-
SHA1
c405c388bab56fd3807f45bec2125f77f52efc12
-
SHA256
205f5576f7f7cb641fa5182dac92b34367240f22f3877805ff34f945daaccb0e
-
SHA512
80f97aee581a2bdad6496e79fdab4c5fe357d5ed51a6bdc936655202aef2f03d495f3bc47450d3aea3bec191ce33904bdf8cad85ab10f2b5d0fbec65322d2af5
-
SSDEEP
768:vx0VMh0ITkx0tCCF2j4LVEKR64Y444444pXf:50V2PtZ2j4LVEKw
Malware Config
Signatures
Files
-
205f5576f7f7cb641fa5182dac92b34367240f22f3877805ff34f945daaccb0e.exe windows x86
c8691b050e35bd3fc1b5118719a08a9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostQuitMessage
SendMessageA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
kernel32
FindClose
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetModuleFileNameA
SetFileAttributesA
CopyFileA
GetDiskFreeSpaceA
RemoveDirectoryA
ReplaceFileA
InterlockedIncrement
InterlockedDecrement
FindNextFileA
GetStartupInfoA
GetCurrentDirectoryA
FindFirstFileA
LoadLibraryA
CreateFileA
SetCurrentDirectoryA
lstrcatA
lstrcpyA
crtdll
__GetMainArgs
_exit
_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
strrchr
_initterm
_acmdln_dll
exit
_XcptFilter
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ