Static task
static1
Behavioral task
behavioral1
Sample
245c83591d6737cfe78712b14d2e32ede07b12dd2942b9f11770038347130764.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
245c83591d6737cfe78712b14d2e32ede07b12dd2942b9f11770038347130764.exe
Resource
win10v2004-20221111-en
General
-
Target
245c83591d6737cfe78712b14d2e32ede07b12dd2942b9f11770038347130764
-
Size
744KB
-
MD5
7e2d4a8ef0d7a610eeabca65308af6b4
-
SHA1
54028ccf17d0ade028b3a11be90a400967a3cbf3
-
SHA256
245c83591d6737cfe78712b14d2e32ede07b12dd2942b9f11770038347130764
-
SHA512
eb7b34e54878b214353262b94aec6b83080bd1640f8d86c13256ce1e933f8d0191e95b8a7aca241c97b0755af651bf102b9eae7c4dbfc21b58eebdf45324dc69
-
SSDEEP
12288:vjWGcod2Gf6z3WodO4UO2WxHWgg7I2xrvTNdYiUApnYsn7evLH2iF66t:vjWGX6zmFKnATRdtLnYs+LHrFht
Malware Config
Signatures
Files
-
245c83591d6737cfe78712b14d2e32ede07b12dd2942b9f11770038347130764.exe windows x86
b1096352b0194ece9f1f6a69eb70bcd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetVersion
FindVolumeClose
GetCommandLineA
FindVolumeClose
GetStdHandle
FindAtomW
ResumeThread
HeapSize
VirtualAlloc
WaitForSingleObject
ReleaseMutex
GetExitCodeThread
CreateFileA
GetFileSize
GetModuleHandleA
DeleteFileA
SetEndOfFile
CloseHandle
SetFileAttributesA
EnterCriticalSection
IsBadReadPtr
GetCurrentDirectoryA
DeleteAtom
GetEnvironmentVariableA
shell32
DllUnregisterServer
SHFree
DuplicateIcon
ExtractIconA
DragFinish
DragQueryFileA
StrChrA
SHGetSettings
SHFree
ShellAboutA
ShellMessageBoxA
DragAcceptFiles
SHGetMalloc
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ