Static task
static1
Behavioral task
behavioral1
Sample
41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d.exe
Resource
win10v2004-20220901-en
General
-
Target
41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d
-
Size
32KB
-
MD5
f770cb1272101345f8c040dd4714ac37
-
SHA1
50387d97ddfdbe605a085226403f873af4fbd71f
-
SHA256
41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d
-
SHA512
d7936a0aaaab57e1d0bf63b7e6930bb745d55963411bda992e384121c0804cf13ba98c11cca0cbcdb707faa94dc667fb1f56013655ccc561edf3a77e7963785b
-
SSDEEP
768:IZ71cnyyM4AaX80naUU5Zj0taG4KKUzNd:871ETKsDnAS4KpNd
Malware Config
Signatures
Files
-
41a6c0ca811d683d5c4c94d8c5611420b9c4e635398bbd116b845ada9f7cdb3d.exe windows x86
7e8ed5c2fc436abed21f0da9f6eac438
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetMessageA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
MessageBoxA
DefWindowProcA
DestroyWindow
SendMessageA
DispatchMessageA
kernel32
GetCurrentDirectoryA
HeapAlloc
CreateFileA
ReadFile
CloseHandle
LoadLibraryA
GetProcessHeap
GetModuleHandleA
GetStartupInfoA
GetLocalTime
DeviceIoControl
CompareStringW
ReplaceFileA
RemoveDirectoryA
FindNextVolumeA
GetDiskFreeSpaceA
SetFileAttributesA
CopyFileA
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ