Static task
static1
Behavioral task
behavioral1
Sample
104f49762ae1765b8a4ff0828e02287de5f8fa3dded20c47482de12581e419de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
104f49762ae1765b8a4ff0828e02287de5f8fa3dded20c47482de12581e419de.exe
Resource
win10v2004-20220901-en
General
-
Target
104f49762ae1765b8a4ff0828e02287de5f8fa3dded20c47482de12581e419de
-
Size
63KB
-
MD5
094a7940de3fc0e3843c116044b624f5
-
SHA1
b3d92fda0588c55f28b2a61487e46d560382a814
-
SHA256
104f49762ae1765b8a4ff0828e02287de5f8fa3dded20c47482de12581e419de
-
SHA512
0b829a2c7d244d43abc4ccc36746dc6b12e241c46937c476c64d9ee8790cc0bc7731393181c9259c6c37ba82a48ecc23f18484fe9433440dde93547b06519503
-
SSDEEP
1536:2hahE8EqKNEdUhomK7vOJwmK9Tjcnu7NCGJoO:2hahxhR8LK7WJwR9Tjt
Malware Config
Signatures
Files
-
104f49762ae1765b8a4ff0828e02287de5f8fa3dded20c47482de12581e419de.exe windows x86
60bd8a4c9b8c408111ed24e1276c448c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFileInfoA
SHGetDiskFreeSpaceA
DragFinish
SHGetDataFromIDListA
SHFileOperationA
msctf
TF_GetInputScope
TF_UninitSystem
TF_InitSystem
TF_CreateLangBarMgr
clbcatq
SetupOpen
CheckMemoryGates
DllGetClassObject
dsprop
MsgBox
CheckADsError
ErrMsg
FindSheet
crypt32
CertFindAttribute
CertCreateContext
CertNameToStrA
CertFindCRLInStore
CertFindExtension
CertFindChainInStore
kernel32
ConnectNamedPipe
FileTimeToLocalFileTime
CopyFileA
IsBadStringPtrA
GetComputerNameA
GetEnvironmentVariableA
IsBadWritePtr
SetCurrentDirectoryA
GetModuleFileNameA
VirtualQuery
HeapCreate
CreateNamedPipeA
GetModuleHandleA
IsBadCodePtr
OpenMutexA
GetCPInfo
CreateEventA
MoveFileA
FindResourceA
EncodeSystemPointer
SetFileAttributesA
FormatMessageA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 735B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ