Static task
static1
Behavioral task
behavioral1
Sample
574978388a5f227765ea5f6c58ab78af7079d65fedf1cb81d560e3115dac6591.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
574978388a5f227765ea5f6c58ab78af7079d65fedf1cb81d560e3115dac6591.exe
Resource
win10v2004-20221111-en
General
-
Target
574978388a5f227765ea5f6c58ab78af7079d65fedf1cb81d560e3115dac6591
-
Size
394KB
-
MD5
18ce3a05a84f34946138658e34574e2a
-
SHA1
3d8298ca45f06d806121f8a0708ceacceae724ca
-
SHA256
574978388a5f227765ea5f6c58ab78af7079d65fedf1cb81d560e3115dac6591
-
SHA512
c162f82aec282a46e895f0693b074465d5698853b2a3bb8e5c1dbf94cd363d7ee0e3d2a2dcc92587813c10c6e780abcc093e8c77a623bcf5d5b077a8dfc36b4e
-
SSDEEP
12288:erCwMBT5xTH2CGg9qgTYjxv/OBj4zciqXhR:ZxBXTHbGg9qgTmxe5vRR
Malware Config
Signatures
Files
-
574978388a5f227765ea5f6c58ab78af7079d65fedf1cb81d560e3115dac6591.exe windows x86
87d8dafe91b71aa0d66fc5fd396a9d5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPriorityClass
ReleaseMutex
lstrcpyW
DisconnectNamedPipe
HeapCreate
ClearCommBreak
SetEvent
GetModuleHandleA
lstrlenW
GetFileAttributesA
CreatePipe
GetStdHandle
GetStartupInfoA
IsDebuggerPresent
WriteConsoleW
WriteConsoleW
WriteConsoleW
GetLastError
GetCurrentDirectoryA
CloseHandle
CopyFileW
msftedit
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichEditWndProc
RichListBoxWndProc
shell32
DragAcceptFiles
ShellMessageBoxA
SHGetSettings
StrChrA
ShellMessageBoxA
DuplicateIcon
SHGetMalloc
SHGetMalloc
ExtractIconA
ShellAboutA
DragQueryFileA
SHGetDiskFreeSpaceA
SHGetDiskFreeSpaceA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 385KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ