Static task
static1
Behavioral task
behavioral1
Sample
42630d7c8cf38f61c6f9e10b6cf4ff01e0e75063285cf1d5cae99566ec2dff73.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
42630d7c8cf38f61c6f9e10b6cf4ff01e0e75063285cf1d5cae99566ec2dff73.exe
Resource
win10v2004-20221111-en
General
-
Target
42630d7c8cf38f61c6f9e10b6cf4ff01e0e75063285cf1d5cae99566ec2dff73
-
Size
165KB
-
MD5
0ab13ede9719b2e6a0697b5be9977d70
-
SHA1
650e2d2da3aeaa9c62381ea31f6e0bd42b254ed9
-
SHA256
42630d7c8cf38f61c6f9e10b6cf4ff01e0e75063285cf1d5cae99566ec2dff73
-
SHA512
b32ed3bccbc57cb6a0105ca9aecc1ac812346d318387bac17c951def713149bf1508aa77755256486324788a527148878b9b6dea2ea4c3aa42388fba06e0b03a
-
SSDEEP
3072:6bOWY1fKqHz3hQlabNFLrOqxj9IapuqSgVbZ9Tkhkt+GAUnvJ/Fd:6iWY1fdRQlMrOq7IapuxkbZyKt+MnvJ
Malware Config
Signatures
Files
-
42630d7c8cf38f61c6f9e10b6cf4ff01e0e75063285cf1d5cae99566ec2dff73.exe windows x86
5381e5317c898ad1d702e370beef882b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UpdateResourceW
SetCalendarInfoA
GlobalGetAtomNameW
GetPrivateProfileStringW
DisconnectNamedPipe
CreateFileMappingA
SetVolumeMountPointW
EnumDateFormatsExW
CallNamedPipeA
CreateMutexA
GetFileTime
FlushInstructionCache
GetPriorityClass
ExpandEnvironmentStringsW
FindResourceExA
SetProcessPriorityBoost
EnumUILanguagesA
CommConfigDialogA
SetSystemTime
GlobalDeleteAtom
InterlockedIncrement
GetSystemWindowsDirectoryA
GetPrivateProfileStringA
GetFileAttributesExA
ResumeThread
GetVolumePathNameW
GetSystemDefaultLangID
GetProfileStringW
EndUpdateResourceW
LocalHandle
GetFileSizeEx
IsDebuggerPresent
GetShortPathNameA
EnumResourceTypesA
FindNextVolumeMountPointW
user32
ToUnicode
DestroyMenu
CreatePopupMenu
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cddfskn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE