Static task
static1
Behavioral task
behavioral1
Sample
434da666523170497cfcf7bfab8dd9bd6e64b0e345d06de314bb3b65ee7d202c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
434da666523170497cfcf7bfab8dd9bd6e64b0e345d06de314bb3b65ee7d202c.exe
Resource
win10v2004-20220812-en
General
-
Target
434da666523170497cfcf7bfab8dd9bd6e64b0e345d06de314bb3b65ee7d202c
-
Size
304KB
-
MD5
f3c8560e8f400620cc004273ba0f7e70
-
SHA1
ae43664a0aeadefae859b80dbb340707bfe238f7
-
SHA256
434da666523170497cfcf7bfab8dd9bd6e64b0e345d06de314bb3b65ee7d202c
-
SHA512
566c009cb28e2b1418ce7fa6682c15fcd61866472ec729d2534b8f39b9ca620534d563bd9607d0d43c51456ac9313fdecab13d0435bba8bf62e6840df88c5b05
-
SSDEEP
6144:exSL6UJG/QpxWxA2ZO9+M2pPRAiaSmwn8Or8tU2veNuc3i:exg6kXWXZOIMmRAhOr8tU2vguc3
Malware Config
Signatures
Files
-
434da666523170497cfcf7bfab8dd9bd6e64b0e345d06de314bb3b65ee7d202c.exe windows x86
770611c34d8272ee3286b742386a32f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
FindAtomW
ResetEvent
GetFileAttributesA
ExitProcess
GetSystemTime
GetModuleHandleW
GetCommandLineW
ReleaseMutex
GetDriveTypeW
GetDiskFreeSpaceW
CloseHandle
GetTickCount
VirtualAlloc
CreateFileA
GetTickCount
LocalFree
ReleaseMutex
GetComputerNameW
lstrlenA
user32
CreateWindowExA
DrawStateA
EndDialog
GetClassInfoA
CallWindowProcA
CloseWindow
DispatchMessageA
GetMenu
GetCaretPos
DestroyCaret
GetClientRect
GetDlgItem
FillRect
rasapi32
DwCloneEntry
DwEnumEntryDetails
RasDeleteEntryA
DwRasUninitialize
RasDialA
adsnt
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ