Static task
static1
Behavioral task
behavioral1
Sample
2672d7c5dd69a8f78e655885d70e4a86d0ab6073a65f56c7757c5ce4dc8790d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2672d7c5dd69a8f78e655885d70e4a86d0ab6073a65f56c7757c5ce4dc8790d6.exe
Resource
win10v2004-20221111-en
General
-
Target
2672d7c5dd69a8f78e655885d70e4a86d0ab6073a65f56c7757c5ce4dc8790d6
-
Size
96KB
-
MD5
df0224da91a88a1c5e4d80f2bc507897
-
SHA1
7ec2ee09194bb25ec8d4754e50c7f9380c874a62
-
SHA256
2672d7c5dd69a8f78e655885d70e4a86d0ab6073a65f56c7757c5ce4dc8790d6
-
SHA512
9c49da6c482a98df21b696842b47bfbd7ee029079e90a8e1eb5725abf6a49c081c6e2fc993322efa0ea3877d77026cd63f63649b61b1d0dfbd40c5a12d56f0d8
-
SSDEEP
1536:We/1eIZtNtPn8a0PDwx9edYBdLwU39xyvOw6:WetnFtP8VD89PBdZtc6
Malware Config
Signatures
Files
-
2672d7c5dd69a8f78e655885d70e4a86d0ab6073a65f56c7757c5ce4dc8790d6.exe windows x86
b6263eb2ab7480281d24e0131ecd95ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
GetModuleFileNameA
CloseHandle
ReadFile
GetFileSize
CreateFileA
EndUpdateResourceA
UpdateResourceA
SetFilePointer
BeginUpdateResourceA
SizeofResource
GetProcAddress
LoadLibraryA
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetConsoleCtrlHandler
GetLastError
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetStringTypeW
user32
EndDialog
SendMessageA
LoadIconA
CheckDlgButton
SetWindowPos
GetCursorPos
GetWindowRect
PtInRect
LoadCursorA
SetCursor
MessageBoxA
GetDlgItem
EnableWindow
DestroyWindow
SetDlgItemTextA
DialogBoxParamA
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ