Static task
static1
Behavioral task
behavioral1
Sample
785ceb7221c9e88fcbdd5e2557c25d80f26d0bfd87504fe384f756ab753eb623.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
785ceb7221c9e88fcbdd5e2557c25d80f26d0bfd87504fe384f756ab753eb623.exe
Resource
win10v2004-20221111-en
General
-
Target
785ceb7221c9e88fcbdd5e2557c25d80f26d0bfd87504fe384f756ab753eb623
-
Size
536KB
-
MD5
e821389b86f185f1427acb5bdf966615
-
SHA1
50bd342dd621c01690bdaf05a9e9f27b83ac6063
-
SHA256
785ceb7221c9e88fcbdd5e2557c25d80f26d0bfd87504fe384f756ab753eb623
-
SHA512
39eb94a5cc5f2c91fa543b1b5b30cf3b3f8a48c18bc9a426f713c9f9c22983323986dd63b3f25d9d489579e28ab9924d97f630eae61a33d5e9645762d4e1e36d
-
SSDEEP
12288:mi4V0puvt8k7kEjINM10JDx5+sh8dJSJt:QVfvm2aAKDx5fh8d
Malware Config
Signatures
Files
-
785ceb7221c9e88fcbdd5e2557c25d80f26d0bfd87504fe384f756ab753eb623.exe windows x86
3a7f99bf542dab3ea1f7b17ab9e7f166
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
CloseHandle
GetCommandLineA
lstrlenA
GetModuleFileNameW
FindClose
GetFileTime
CloseHandle
HeapCreate
CreateFileMappingW
CreateFileW
LocalFlags
DeviceIoControl
LocalSize
GetConsoleAliasW
IsDebuggerPresent
Sleep
GetStartupInfoA
GetModuleHandleA
GetDriveTypeW
user32
IsZoomed
DispatchMessageA
GetIconInfo
LoadImageA
BeginPaint
DestroyMenu
DrawTextW
GetWindowLongA
DispatchMessageA
IsWindow
DestroyWindow
CallWindowProcW
PeekMessageA
dmcompos
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ