Static task
static1
Behavioral task
behavioral1
Sample
313128af7159b6dc6b6992d8b7ffbc404498de6765f3a0e18a8b8cc39e3c2581.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
313128af7159b6dc6b6992d8b7ffbc404498de6765f3a0e18a8b8cc39e3c2581.exe
Resource
win10v2004-20220812-en
General
-
Target
313128af7159b6dc6b6992d8b7ffbc404498de6765f3a0e18a8b8cc39e3c2581
-
Size
67KB
-
MD5
4db260920b8b683ea0dcf39d2bfec9f0
-
SHA1
880a5d5b4e47720c6a44c4bcbe0d9d180a9869ca
-
SHA256
313128af7159b6dc6b6992d8b7ffbc404498de6765f3a0e18a8b8cc39e3c2581
-
SHA512
251f52ee68061cc9e7e78935efffc5286f65b5fc8fac45329958e1696056a0cbc16db9c10c986fb9b45b2983aa2585af99ace0ee6691cbce6bb8bddeea457bfa
-
SSDEEP
1536:8FQZFEKTKeSz4rjKC8s3FpWWoNve29wJkPe7B683:yaF0f8nK03FpWdcDJye7QQ
Malware Config
Signatures
Files
-
313128af7159b6dc6b6992d8b7ffbc404498de6765f3a0e18a8b8cc39e3c2581.exe windows x86
2a406b83820ac1ed944a813f8e526ff6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpyW
IsDebuggerPresent
lstrlenW
CopyFileW
GetStartupInfoA
CreatePipe
GetLastError
GetModuleHandleA
GetCurrentDirectoryA
GetStdHandle
CloseHandle
WriteConsoleW
GetFileAttributesA
WriteConsoleW
GetPriorityClass
DisconnectNamedPipe
HeapCreate
ReleaseMutex
WriteConsoleW
SetEvent
ClearCommBreak
msftedit
RichComboBoxWndProc
RichListBoxWndProc
RichEditWndProc
SetCustomTextOutHandlerEx
shell32
StrChrA
SHGetMalloc
DragAcceptFiles
DragQueryFileA
DuplicateIcon
ExtractIconA
ShellMessageBoxA
SHGetSettings
SHGetMalloc
SHGetDiskFreeSpaceA
ShellMessageBoxA
SHGetDiskFreeSpaceA
ShellAboutA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ