Static task
static1
Behavioral task
behavioral1
Sample
758dad19bebd5778d177a48939a410fa05faf23b42b220c24e4afb807109f783.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
758dad19bebd5778d177a48939a410fa05faf23b42b220c24e4afb807109f783.exe
Resource
win10v2004-20220812-en
General
-
Target
758dad19bebd5778d177a48939a410fa05faf23b42b220c24e4afb807109f783
-
Size
365KB
-
MD5
c9dbb90c1dc3f4ec3b6f0fe6721c7d69
-
SHA1
4236884a3016b355894b8df8bf037969c8d79d31
-
SHA256
758dad19bebd5778d177a48939a410fa05faf23b42b220c24e4afb807109f783
-
SHA512
97a35edb15924019ce55e850d81d9d4f7be9c84961c4c0f1ba499907feabcf10041fe22d165f362aa4bf204be8495f1161d331b3c258ff7b2752aa6e39b74b9e
-
SSDEEP
6144:dlfZBvA+j+4CnpCxAE0KPn7dB9Wc7V6qLJIg8ukjODlGzfcdc+pvsCojHViEosmH:dd5j3CcxR0e7Uc7MOJIP1WGzUdNiCoj+
Malware Config
Signatures
Files
-
758dad19bebd5778d177a48939a410fa05faf23b42b220c24e4afb807109f783.exe windows x86
30b66925c95dfc838b507fb098d2e8e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
CreateFileA
CreateProcessA
FindResourceA
FindClose
DeleteAtom
GlobalFree
HeapCreate
PulseEvent
GetTickCount
CloseHandle
GetModuleHandleA
GetACP
GetEnvironmentVariableA
SetLastError
GlobalUnlock
CreateMutexA
ReleaseMutex
ExitThread
LoadLibraryA
user32
DrawEdge
GetIconInfo
GetDC
DefWindowProcW
CopyRect
FillRect
SetFocus
CallWindowProcA
DrawMenuBar
IsWindow
GetDlgItem
CheckRadioButton
DispatchMessageA
msasn1
ASN1BEREncEoid
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecNull
ASN1BERDecCheck
dpnet
DirectPlay8Create
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ