Static task
static1
Behavioral task
behavioral1
Sample
2441dbc043c6fadbd837b082e69eac883dfdd75683b01312fbba28006e575a8e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2441dbc043c6fadbd837b082e69eac883dfdd75683b01312fbba28006e575a8e.exe
Resource
win10v2004-20221111-en
General
-
Target
2441dbc043c6fadbd837b082e69eac883dfdd75683b01312fbba28006e575a8e
-
Size
144KB
-
MD5
cef77b4e204564f1f9ee019ce5915c22
-
SHA1
018a2c2cc3b4d70e1c6cee3b07cbc6c76b8fdc19
-
SHA256
2441dbc043c6fadbd837b082e69eac883dfdd75683b01312fbba28006e575a8e
-
SHA512
34e1baefa0a0dbcaf20e685f856cf2d8696b188e49c50f92d80bfe0f93d261cb3649ac79482a5e7c23dd28dcf1874343638a08a70f045a2c4f9276d7df6da3d3
-
SSDEEP
3072:GgUkzA4KuRumf3Mm6j6alRDG6RRF0X/vGGXpAHhPHHli/EnvK+:AUAtuRRfcm6jdRDfWSPHHli/Ev5
Malware Config
Signatures
Files
-
2441dbc043c6fadbd837b082e69eac883dfdd75683b01312fbba28006e575a8e.exe windows x86
89e120590bcad3100e1357b12ea74b79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapAlloc
GetFileType
CreateEventA
CreateDirectoryExW
SetTimerQueueTimer
HeapQueryInformation
SetFilePointerEx
GetDevicePowerState
CloseHandle
MoveFileExW
VirtualAlloc
GetProcessHeaps
HeapAlloc
FindNextVolumeA
user32
GetRegisteredRawInputDevices
IsChild
ChangeMenuA
EndMenu
MessageBoxTimeoutA
GetClassNameW
IsCharAlphaA
MonitorFromPoint
CreateWindowExW
IsChild
DeviceEventWorker
CreateWindowExA
Sections
CODE Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ