Static task
static1
Behavioral task
behavioral1
Sample
c339cc7c2243dd43334b2faa85bfddde6ef423deb97f1c07de06d04733a73742.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c339cc7c2243dd43334b2faa85bfddde6ef423deb97f1c07de06d04733a73742.exe
Resource
win10v2004-20221111-en
General
-
Target
c339cc7c2243dd43334b2faa85bfddde6ef423deb97f1c07de06d04733a73742
-
Size
368KB
-
MD5
9576221b9bb29ece965f728eea451ccd
-
SHA1
ce3423953a728fdd905ff12c55b80313538efcfd
-
SHA256
c339cc7c2243dd43334b2faa85bfddde6ef423deb97f1c07de06d04733a73742
-
SHA512
9d850a28fd5d09ff6e2fdf267f6d03438c4c82374e7c70f16285dc01015a9bf50dd8681673a5539b0eac0991533710917df869c2cfc513a8a1ba35e3edf970bb
-
SSDEEP
6144:PZUsxnVs3zjKFYUKGYyrBKcHnjYfIHTn1rrQzWmtXhzpJP/yDfMvCecDjd7mUOV:PZZ6GMWTHnnzn1rrQ5tTIJp7mf
Malware Config
Signatures
Files
-
c339cc7c2243dd43334b2faa85bfddde6ef423deb97f1c07de06d04733a73742.exe windows x86
292e2bc3ddef5cb1a87053c0eaa3668e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
ResetEvent
LocalFree
CreateThread
GetEnvironmentVariableA
FindVolumeClose
VirtualAlloc
GetModuleHandleW
GetExitCodeProcess
WriteFile
ResumeThread
LocalSize
InterlockedExchange
GetMailslotInfo
GetACP
GlobalFree
GetPrivateProfileIntW
lstrlenA
GetDriveTypeW
CloseHandle
user32
GetClientRect
GetClassInfoA
GetSysColor
IsWindow
GetKeyboardType
EndDialog
GetSysColor
GetCursorInfo
DrawStateW
CallWindowProcW
CreateWindowExA
SetFocus
DispatchMessageA
qedit
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
hdwwiz.cpl
InstallNewDevice
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ