Static task
static1
Behavioral task
behavioral1
Sample
1be3908d6c9021132c5777d3c6a53fee903e903a0c17fd2e5c6426d13d3fabc7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1be3908d6c9021132c5777d3c6a53fee903e903a0c17fd2e5c6426d13d3fabc7.exe
Resource
win10v2004-20220901-en
General
-
Target
1be3908d6c9021132c5777d3c6a53fee903e903a0c17fd2e5c6426d13d3fabc7
-
Size
64KB
-
MD5
ca4dee3567aa4c497a12eebc89528ef6
-
SHA1
dad16ef87c9f3f0192146208a1fb348e58a98a74
-
SHA256
1be3908d6c9021132c5777d3c6a53fee903e903a0c17fd2e5c6426d13d3fabc7
-
SHA512
32f473530f03dcc0637659602bbbf65be50272ba6d6805f89c67beb245df0ed965869dc1c7871ed96194a5c0d332cbe1ae14bcf3afac2fef32c7eb38ae991672
-
SSDEEP
768:XQ7F9rMKIuV5ob0JEcB4z5Q/orv9pM0d5g4/W06oiNVEKJJg1nkgbvcHok3K6D:gz4ubTSs/orv9C0bF/8hlunXbqVa
Malware Config
Signatures
Files
-
1be3908d6c9021132c5777d3c6a53fee903e903a0c17fd2e5c6426d13d3fabc7.exe windows x86
364a0f6f9d58150d96cb37576f0c040a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cryptdll
MD5Final
MD5Init
CDLocateRng
kernel32
GetFileSize
CopyFileW
GetACP
WriteConsoleW
ReadFile
ReplaceFileW
SetEnvironmentVariableW
GetLastError
GetTickCount
CreateDirectoryA
CreateMutexA
CreateSemaphoreW
WaitForSingleObject
GetDriveTypeW
GetModuleHandleA
InitializeCriticalSection
SetEnvironmentVariableA
GetLogicalDriveStringsA
GetSystemTime
GetShortPathNameA
FindFirstFileW
GetStartupInfoA
SearchPathA
GetProcAddress
GetCurrentDirectoryW
CompareStringA
CreateWaitableTimerA
GetDateFormatA
OpenMutexW
user32
PeekMessageW
MessageBoxW
IsDialogMessageA
IsCharUpperA
GetClassInfoW
DefDlgProcA
LoadImageA
GetMessageA
DrawIcon
DispatchMessageW
DialogBoxParamW
wsprintfW
LoadCursorW
GetKeyNameTextA
LoadStringA
PostMessageW
FindWindowA
SetFocus
esent
JetBeginTransaction
JetCommitTransaction
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ