Static task
static1
Behavioral task
behavioral1
Sample
1473c85c6ebc6a010b4fe20103a8e249c6c8ded67fb3278cd1aa881b4732b8d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1473c85c6ebc6a010b4fe20103a8e249c6c8ded67fb3278cd1aa881b4732b8d9.exe
Resource
win10v2004-20220812-en
General
-
Target
1473c85c6ebc6a010b4fe20103a8e249c6c8ded67fb3278cd1aa881b4732b8d9
-
Size
192KB
-
MD5
508cf5d35296dd481f2b4ff190c46970
-
SHA1
422c4fc2ac989497ae17c2afb379ab3dbd00258f
-
SHA256
1473c85c6ebc6a010b4fe20103a8e249c6c8ded67fb3278cd1aa881b4732b8d9
-
SHA512
01ea120e51389b6afd88f2bba77a08d1928d942e705f83f7c81f722f64506ff23036e022f17319cd59ee0150e6c0c008d28d65a99ce55b87b6b1b1e22e713414
-
SSDEEP
1536:I6kFmfy9TlHbjHoBhHddO+JWPNMkAM/A:0FmqLHbjshqXPN//
Malware Config
Signatures
Files
-
1473c85c6ebc6a010b4fe20103a8e249c6c8ded67fb3278cd1aa881b4732b8d9.exe windows x86
800b253ddcde02c32572b4328c8dd250
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
DeleteAtom
FindAtomA
GetFileAttributesA
DeleteFileW
CreateFileA
GetCommandLineA
GetModuleHandleA
GetStdHandle
GetStartupInfoA
ReadFile
IsBadCodePtr
GetCommandLineA
GetEnvironmentVariableA
GetModuleFileNameA
MapViewOfFile
CloseHandle
GetPriorityClass
HeapCreate
TlsGetValue
user32
DrawTextW
GetClassInfoA
CallWindowProcW
IsZoomed
GetKeyState
DispatchMessageA
SetFocus
GetSysColor
FindWindowA
GetWindowInfo
DestroyMenu
GetWindowLongA
DispatchMessageA
DestroyMenu
ntlanman
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ucdjlsy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE