Static task
static1
Behavioral task
behavioral1
Sample
10ff5ea23112fb975b8184d7d855dc1fbba8366c32d1c2d0bfe61b5d497f7e05.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10ff5ea23112fb975b8184d7d855dc1fbba8366c32d1c2d0bfe61b5d497f7e05.exe
Resource
win10v2004-20221111-en
General
-
Target
10ff5ea23112fb975b8184d7d855dc1fbba8366c32d1c2d0bfe61b5d497f7e05
-
Size
301KB
-
MD5
81c935342baaa0d674cc0f0f423ddb98
-
SHA1
153271d51298b6799908b22435fce3f31af38ae5
-
SHA256
10ff5ea23112fb975b8184d7d855dc1fbba8366c32d1c2d0bfe61b5d497f7e05
-
SHA512
d8fa14aaad5f8d663bb59705f481331a489e7c21c9f0e4ee308cc1f061da36f1ff3187f157854ae6e4eb388d97bc6250c538865ee3b956152f49a1b594e9f4d7
-
SSDEEP
6144:MDpWnD5eM2jHO5fkGaZ7uGagrECIrWmNVpodGyvh/TwPGr:ZY1juMGmCbMEPrkdTTwP
Malware Config
Signatures
Files
-
10ff5ea23112fb975b8184d7d855dc1fbba8366c32d1c2d0bfe61b5d497f7e05.exe windows x86
2f3628d8a4abd1c0c2a5faa9e04d1a2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
GetLocaleInfoW
GetCurrentProcess
IsValidCodePage
LocalLock
FindResourceW
MapViewOfFile
VirtualProtect
TlsGetValue
CreateDirectoryW
SetLastError
FindClose
HeapFree
IsBadWritePtr
GetExitCodeThread
GetTickCount
RemoveDirectoryW
GetStringTypeA
GetDriveTypeW
GetModuleHandleA
GetFileAttributesA
user32
IsDialogMessageA
GetWindowLongW
wsprintfW
LoadCursorA
PostMessageW
SetFocus
SetCursor
GetWindowTextW
DispatchMessageA
LoadStringA
IsWindow
LoadImageW
PeekMessageW
msctf
DllCanUnloadNow
DllUnregisterServer
TF_InitSystem
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE