Static task
static1
Behavioral task
behavioral1
Sample
c32b65bbf724cafe2e53385b8fd31f7ac5215d7ab6e8149ddf6fc94772104050.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c32b65bbf724cafe2e53385b8fd31f7ac5215d7ab6e8149ddf6fc94772104050.exe
Resource
win10v2004-20220901-en
General
-
Target
c32b65bbf724cafe2e53385b8fd31f7ac5215d7ab6e8149ddf6fc94772104050
-
Size
355KB
-
MD5
d58b1ab154ba603adc904ddb7400c70b
-
SHA1
412939f43317f8099fdcd99f62c4fbebde20968a
-
SHA256
c32b65bbf724cafe2e53385b8fd31f7ac5215d7ab6e8149ddf6fc94772104050
-
SHA512
067ed9a5cbc7e443c75235e98a7a8ca0e17ed8a822269c1c88dcad2e67b5baa562e9937838c387980d95c0dc37601f9a2eea53e169330d65634adc65fbd18a48
-
SSDEEP
6144:KwSIHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVVT:KwSIR9QI0Ay6fYvzEOe2KNSQ6l83zBzk
Malware Config
Signatures
Files
-
c32b65bbf724cafe2e53385b8fd31f7ac5215d7ab6e8149ddf6fc94772104050.exe windows x86
66883693344aa59a5321cf2c4637801a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ResumeThread
CreateFileA
GetTickCount
FindAtomW
SuspendThread
GetCommandLineW
GetComputerNameW
LocalFree
LoadLibraryA
GetFileAttributesA
ResetEvent
lstrlenA
GetPrivateProfileIntA
ExitProcess
CloseHandle
GetSystemTime
GetDiskFreeSpaceW
GetTickCount
GetModuleHandleW
user32
GetCaretPos
DestroyCaret
CloseWindow
GetClientRect
CallWindowProcA
GetDlgItem
DispatchMessageA
FillRect
GetMenu
GetClassInfoA
DrawStateA
EndDialog
CreateWindowExA
rasapi32
RasDialA
DwEnumEntryDetails
DwRasUninitialize
RasDeleteEntryA
DwCloneEntry
adsnt
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ