Static task
static1
Behavioral task
behavioral1
Sample
336dfd05c54397d9608321d838d826c4cf3198b8b51574720b7993d08634d01c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
336dfd05c54397d9608321d838d826c4cf3198b8b51574720b7993d08634d01c.exe
Resource
win10v2004-20220901-en
General
-
Target
336dfd05c54397d9608321d838d826c4cf3198b8b51574720b7993d08634d01c
-
Size
113KB
-
MD5
b0ac782896f95c8409a5d406e281b408
-
SHA1
e3d329233bc3669707a8b3299427f4fa977984eb
-
SHA256
336dfd05c54397d9608321d838d826c4cf3198b8b51574720b7993d08634d01c
-
SHA512
04e1b741e0bc72332f126952d38f94e67a4dec30aa32226a456c85c56e3e4eafbba3e30b0e6928e90742c7387311a3320172223ddd601f036588da48040f0d23
-
SSDEEP
3072:4gN6sqf9OCNIbD6+QbksqAQkA0XQ3Xictpw:vk1d+etbkxd2Efw
Malware Config
Signatures
Files
-
336dfd05c54397d9608321d838d826c4cf3198b8b51574720b7993d08634d01c.exe windows x86
df33737e5faf70370b32e169c5855a10
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
CreateFileW
CloseHandle
GetProcessHeap
GetModuleHandleA
UnmapViewOfFile
GlobalFree
lstrcpyA
GetEnvironmentVariableA
TlsGetValue
GlobalUnlock
CreateMutexA
GetCurrentThreadId
HeapCreate
SetLastError
FindResourceW
lstrlenW
GetStdHandle
GetExitCodeProcess
LoadLibraryExA
user32
GetDC
IsWindow
CreateWindowExA
FillRect
SetFocus
DrawMenuBar
CreateMenu
GetCaretPos
DrawEdge
GetDlgItem
CallWindowProcA
DispatchMessageA
CheckRadioButton
rsaenh
CPSignHash
CPHashData
CPDecrypt
CPDeriveKey
CPGenKey
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE