Static task
static1
Behavioral task
behavioral1
Sample
475372bbabdd0f9f1639cd4566124f0e20ed5f6381ed11b85dc41661f51ff8d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
475372bbabdd0f9f1639cd4566124f0e20ed5f6381ed11b85dc41661f51ff8d7.exe
Resource
win10v2004-20220812-en
General
-
Target
475372bbabdd0f9f1639cd4566124f0e20ed5f6381ed11b85dc41661f51ff8d7
-
Size
52KB
-
MD5
3d988f5118fabd156438c2831a25cbe5
-
SHA1
f1e2664c5a2f2f5c188bfb8291576ddc29108b17
-
SHA256
475372bbabdd0f9f1639cd4566124f0e20ed5f6381ed11b85dc41661f51ff8d7
-
SHA512
46ce92df376fbe25aaba66f566e17e7bcfe4ecb5dd6b4ec729b3675b5b5d1322b13ce9470caa59ca6d0675f7ad1c0fee79e2b65350e9bf1346b84f332676cfcd
-
SSDEEP
768:Sv9BUNsw82nwu3FzNxvMVTs/sUcdPbxe1b68fAFj5RYUZMxpl:SvWsyXsVTZUEbERoFlRKxpl
Malware Config
Signatures
Files
-
475372bbabdd0f9f1639cd4566124f0e20ed5f6381ed11b85dc41661f51ff8d7.exe windows x86
6d8ed7a971cc99295a8d8d3e6e235ec9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetCurrentThread
CreateThread
DuplicateHandle
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FreeLibrary
GetCurrentProcess
CloseHandle
GetEnvironmentVariableA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetPriorityClass
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetUserDefaultLangID
ExitProcess
CreateFileA
GlobalAlloc
GlobalFree
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
RemoveDirectoryA
ResumeThread
SetPriorityClass
Sleep
SuspendThread
VirtualProtect
WaitForSingleObject
WriteFile
WritePrivateProfileStringA
lstrcat
lstrcpy
lstrlen
GetVersionExA
user32
wsprintfA
MessageBoxA
msvfw32
ICSendMessage
Sections
CODE Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ