Static task
static1
Behavioral task
behavioral1
Sample
902158ce3bbe31215dfab0fe532dc0412a06684c63d86d2ef9c08d4b2307d40f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
902158ce3bbe31215dfab0fe532dc0412a06684c63d86d2ef9c08d4b2307d40f.exe
Resource
win10v2004-20220812-en
General
-
Target
902158ce3bbe31215dfab0fe532dc0412a06684c63d86d2ef9c08d4b2307d40f
-
Size
363KB
-
MD5
a07a98a6c1227aead2b29b72d03b6084
-
SHA1
4b7d0c9da0bdaec518fc8836628f8f31580be0db
-
SHA256
902158ce3bbe31215dfab0fe532dc0412a06684c63d86d2ef9c08d4b2307d40f
-
SHA512
007c579c8cb37afa24254f06332afdaf3c8c6c664823ebb5f8d2454deec7465f1928d8e3dd150fb547270e868e2857561dc04ee666a8c02acf878b9148bd7811
-
SSDEEP
6144:qRMMha4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:qRMMQx4ojf51aTcK0NEQUd0op3QlL
Malware Config
Signatures
Files
-
902158ce3bbe31215dfab0fe532dc0412a06684c63d86d2ef9c08d4b2307d40f.exe windows x86
9ad69ffc90d01926e484fdf7a455471e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
EnumCalendarInfoW
HeapCreate
GlobalFree
ResumeThread
ReadFile
GetCurrentThreadId
GetPrivateProfileStringW
CreateMailslotA
GetCurrentProcessId
FindClose
FindAtomW
GetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
LocalFree
SetLastError
EnterCriticalSection
GetConsoleAliasW
SetEvent
user32
DispatchMessageA
GetMenuInfo
DrawTextW
IsWindow
SetFocus
GetCursorInfo
GetSysColor
DispatchMessageA
GetKeyboardType
GetClientRect
GetKeyState
CallWindowProcW
GetClassInfoA
asycfilt
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
msasn1
ASN1BERDecBool
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ