Static task
static1
Behavioral task
behavioral1
Sample
404850a293cb2d14e518723cce2da70cba82c2004ee8d4ad84935a1180104b5b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
404850a293cb2d14e518723cce2da70cba82c2004ee8d4ad84935a1180104b5b.exe
Resource
win10v2004-20220901-en
General
-
Target
404850a293cb2d14e518723cce2da70cba82c2004ee8d4ad84935a1180104b5b
-
Size
59KB
-
MD5
7efb56a3b6cd27e47d5512700862412e
-
SHA1
f9f43388a3b5e50b24fcc9c9ef597b3c05806cb3
-
SHA256
404850a293cb2d14e518723cce2da70cba82c2004ee8d4ad84935a1180104b5b
-
SHA512
3562258af83166437a9f79b318e1ae21eb05354f3e31e667ef7a805b8c54e14f56b54f069b4f4ace08abceeb717d214dd85fd33d5bd65ff38b9c594895ba5fe7
-
SSDEEP
1536:hoy23iN3HBp0RnzhRNpOd34wC2CQxUbiovS:2y2cBpaBpICgavS
Malware Config
Signatures
Files
-
404850a293cb2d14e518723cce2da70cba82c2004ee8d4ad84935a1180104b5b.exe windows x86
182e36e9619d665867f8c7454d782517
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
CloseHandle
WaitForSingleObject
WaitForMultipleObjects
GetFileSize
GetTickCount
ExitProcess
GetProfileIntA
DeleteFileA
GetTickCount
FindClose
GetStartupInfoW
GetModuleHandleA
CreateMutexW
HeapCreate
RemoveDirectoryW
GetCurrentDirectoryA
Sleep
CreateFileA
SetLastError
ReleaseMutex
GetFileAttributesW
GetStdHandle
HeapSize
GetEnvironmentVariableA
user32
GetClassInfoA
DispatchMessageW
GetDC
GetCursorPos
MessageBoxA
CallWindowProcW
PeekMessageA
GetDC
GetDC
GetSysColor
GetWindowLongA
DispatchMessageW
GetDC
ctl3d32
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Ctl3dCtlColor
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aowzstm Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE