Static task
static1
Behavioral task
behavioral1
Sample
701f716452a479f5d3e355293c9922b8a690e35fbb444e94724e3b740c9d5b8b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
701f716452a479f5d3e355293c9922b8a690e35fbb444e94724e3b740c9d5b8b.exe
Resource
win10v2004-20220812-en
General
-
Target
701f716452a479f5d3e355293c9922b8a690e35fbb444e94724e3b740c9d5b8b
-
Size
307KB
-
MD5
4782d70892f5e47a2fdf798ae493c6ef
-
SHA1
507119fb4828d830e37dd6ca860ca809b70c729e
-
SHA256
701f716452a479f5d3e355293c9922b8a690e35fbb444e94724e3b740c9d5b8b
-
SHA512
5c5ac6a0e082793c4b6074c415ae17978d4f08eb3c237260dd8e45e019b7366248891c9058485c6e707d7d60ddbd90c29b58b680b161b6a7bb3e89bc390d3661
-
SSDEEP
6144:OYsS02/oPbqhjCVTS/EGQalR+pSXSYZaKYxzXpztpz6cIb:0S0YI5FS/vQxBYQtzRVIb
Malware Config
Signatures
Files
-
701f716452a479f5d3e355293c9922b8a690e35fbb444e94724e3b740c9d5b8b.exe windows x86
67c19c4df8156da232c03b1e902830ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
RaiseException
CloseHandle
GetLocaleInfoA
LockResource
GlobalUnlock
InterlockedExchange
GlobalDeleteAtom
SetConsoleOutputCP
FileTimeToLocalFileTime
GetACP
GlobalFree
LoadLibraryExA
SetErrorMode
GetStdHandle
VirtualProtect
Sleep
HeapCreate
GlobalAddAtomA
EnterCriticalSection
GetLastError
user32
GetClassNameA
GetCursorPos
GetWindow
GetParent
SetForegroundWindow
BeginPaint
ShowWindow
GetWindowTextA
ClipCursor
DrawTextA
GetMenuItemInfoA
ReleaseDC
EndPaint
IsIconic
GetFocus
ValidateRect
DrawEdge
OemToCharW
GetActiveWindow
httpapi
HttpCreateHttpHandle
HttpRemoveUrl
HttpTerminate
HttpInitialize
HttpAddUrl
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ