Static task
static1
Behavioral task
behavioral1
Sample
1e0991709aefccc1f87e5a72ebe77a17e40e033971e97f8eac8b400c057c2828.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1e0991709aefccc1f87e5a72ebe77a17e40e033971e97f8eac8b400c057c2828.exe
Resource
win10v2004-20220901-en
General
-
Target
1e0991709aefccc1f87e5a72ebe77a17e40e033971e97f8eac8b400c057c2828
-
Size
359KB
-
MD5
26a31bf50f005c263d65f6b89812ab70
-
SHA1
780e9798249ecf7b75146d0fbb6e6bdd4a53cfdd
-
SHA256
1e0991709aefccc1f87e5a72ebe77a17e40e033971e97f8eac8b400c057c2828
-
SHA512
c1dd8c9ed5f618d127283d9390db34441fa2794cfd64ed04618e1192f09e14630142d1cbb3b0a2de84418cb1dbda1e35ce6369e64d279e3837a47b8092af767c
-
SSDEEP
6144:P5v22DbIq6fWq6wvZenGGZUe9tQL0Yvjx758OWWYf9s0xxN2yoyZTYMyabbb:BvHvLYWvwvZenZLQ48xyO1Yf+0x32y7X
Malware Config
Signatures
Files
-
1e0991709aefccc1f87e5a72ebe77a17e40e033971e97f8eac8b400c057c2828.exe windows x86
f036438abc862daa9e33f07f8fb871ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
lstrcmpA
FindResourceW
GetACP
Heap32First
InterlockedDecrement
GetPrivateProfileIntA
ExitProcess
GetDiskFreeSpaceW
GetPrivateProfileSectionA
InterlockedIncrement
SetEnvironmentVariableA
GetCurrentDirectoryA
GetModuleHandleW
HeapCreate
GetExitCodeProcess
lstrcpyW
GetLongPathNameA
GetPrivateProfileIntA
GetDiskFreeSpaceW
LoadLibraryA
GetStringTypeW
ReadFileEx
apphelp
SdbCreateMsiTransformFile
ApphelpCheckIME
AllowPermLayer
ApphelpCheckExe
clbcatq
DllGetClassObject
ComPlusMigrate
SetSetupSave
ComPlusMigrate
ComPlusMigrate
SetupOpen
CheckMemoryGates
SetupOpen
SetupOpen
CheckMemoryGates
DllGetClassObject
CheckMemoryGates
SetSetupSave
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE