Static task
static1
Behavioral task
behavioral1
Sample
068e8238b58a8b6b9c680fb792368a223b3b4c236ecc81841c69b071c3f01e25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
068e8238b58a8b6b9c680fb792368a223b3b4c236ecc81841c69b071c3f01e25.exe
Resource
win10v2004-20220901-en
General
-
Target
068e8238b58a8b6b9c680fb792368a223b3b4c236ecc81841c69b071c3f01e25
-
Size
113KB
-
MD5
89f6eece4b56a72386d2fa19db8befe7
-
SHA1
f514320bb3b04d9f12c786919bb6b863e0f166f2
-
SHA256
068e8238b58a8b6b9c680fb792368a223b3b4c236ecc81841c69b071c3f01e25
-
SHA512
43e38f2277762951b47f7dc8aa4b23b4776eb142dd90ab0ecceb47e5675d4ad7714a8edd21345c09ed641b1b3f3e812c755c9d4879005f6eb69947235344d486
-
SSDEEP
3072:wUrbYFMUDpzEOz4vWwYBRPvL3jyda/PM3bQsl10/X0w:DUVzx4xYLy8UVl10/X
Malware Config
Signatures
Files
-
068e8238b58a8b6b9c680fb792368a223b3b4c236ecc81841c69b071c3f01e25.exe windows x86
a7d840b76ab5aa729292d3e29c17785b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDrives
lstrcmpiA
GetModuleFileNameA
CreateWaitableTimerW
SuspendThread
Sleep
lstrcmpiA
GetExitCodeProcess
EndUpdateResourceW
FileTimeToLocalFileTime
lstrcmpiA
HeapCreate
GetStdHandle
SetLastError
GetModuleHandleA
CreateNamedPipeA
GetProcessHeap
lstrcmpiA
GetBinaryTypeW
lstrlenA
GetDriveTypeA
lstrcmpiA
IsValidCodePage
printui
bPrinterSetup
PnPInterface
ConstructPrinterFriendlyName
bFolderRefresh
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rts Size: 1024B - Virtual size: 650B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ