Static task
static1
Behavioral task
behavioral1
Sample
32083e203714bee6198cfb4b8845b8c3b2ce3bafeeda963ebd10fc12348cb510.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
32083e203714bee6198cfb4b8845b8c3b2ce3bafeeda963ebd10fc12348cb510.exe
Resource
win10v2004-20220812-en
General
-
Target
32083e203714bee6198cfb4b8845b8c3b2ce3bafeeda963ebd10fc12348cb510
-
Size
138KB
-
MD5
28d6c1885858a444d579f76f8f3ab7d0
-
SHA1
32c1afaa9191ce1c1999507cbc482e60d8e77737
-
SHA256
32083e203714bee6198cfb4b8845b8c3b2ce3bafeeda963ebd10fc12348cb510
-
SHA512
9f79c428994fe57ab8599a4d64de2920a141ce9f4db28972b098ea959162e801d2ebd3bb9b79602ae6b810b41a46862aa481fbc719c9e0a7f32051be661f8fb6
-
SSDEEP
3072:nbOWY1fKqHz3hQlabNFLrOqxj9IapuqSgVbZ9Tkhkt+GAUnvJ/Fd:niWY1fdRQlMrOq7IapuxkbZyKt+MnvJ
Malware Config
Signatures
Files
-
32083e203714bee6198cfb4b8845b8c3b2ce3bafeeda963ebd10fc12348cb510.exe windows x86
5381e5317c898ad1d702e370beef882b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UpdateResourceW
SetCalendarInfoA
GlobalGetAtomNameW
GetPrivateProfileStringW
DisconnectNamedPipe
CreateFileMappingA
SetVolumeMountPointW
EnumDateFormatsExW
CallNamedPipeA
CreateMutexA
GetFileTime
FlushInstructionCache
GetPriorityClass
ExpandEnvironmentStringsW
FindResourceExA
SetProcessPriorityBoost
EnumUILanguagesA
CommConfigDialogA
SetSystemTime
GlobalDeleteAtom
InterlockedIncrement
GetSystemWindowsDirectoryA
GetPrivateProfileStringA
GetFileAttributesExA
ResumeThread
GetVolumePathNameW
GetSystemDefaultLangID
GetProfileStringW
EndUpdateResourceW
LocalHandle
GetFileSizeEx
IsDebuggerPresent
GetShortPathNameA
EnumResourceTypesA
FindNextVolumeMountPointW
user32
ToUnicode
DestroyMenu
CreatePopupMenu
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE