Static task
static1
Behavioral task
behavioral1
Sample
c995027859c71a8ed652c03818019bf2f8dc6a86dbb676805dcb7c63b2c2a7e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c995027859c71a8ed652c03818019bf2f8dc6a86dbb676805dcb7c63b2c2a7e5.exe
Resource
win10v2004-20220812-en
General
-
Target
c995027859c71a8ed652c03818019bf2f8dc6a86dbb676805dcb7c63b2c2a7e5
-
Size
305KB
-
MD5
901058c7748dcbd2117a980d2bc5a652
-
SHA1
04c3a184a7f9bd338a9959e2c13821e8b9091713
-
SHA256
c995027859c71a8ed652c03818019bf2f8dc6a86dbb676805dcb7c63b2c2a7e5
-
SHA512
c82f91ed2245a84e3a81c5650fae42bc48023496fa8f9ae32576c823f40a84807e0ae8147f015dfeeb09f3d5cdb126566567e420e0c5362650875a26bed1918c
-
SSDEEP
6144:jA40QCOxPP7Y5NGsdHScceZ1mJDAYx97zbROwIUCzLhzPVOTbOp0/Klfi8J4:jABQCOxHEHdeXJDhxhd+UcNsQ0/yR
Malware Config
Signatures
Files
-
c995027859c71a8ed652c03818019bf2f8dc6a86dbb676805dcb7c63b2c2a7e5.exe windows x86
7b8c2282f597fd311f8fa36ca08ae8a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
ExitProcess
FindAtomW
GetPrivateProfileIntA
VirtualAlloc
GetCommandLineW
CreateFileMappingA
SuspendThread
lstrlenA
GetFileAttributesA
CloseHandle
GetPriorityClass
IsDebuggerPresent
GetModuleHandleW
LocalFree
ResumeThread
MapViewOfFile
GetComputerNameW
LoadLibraryA
ResetEvent
user32
GetCaretPos
DrawStateA
DestroyCaret
GetMenu
FillRect
DispatchMessageA
CallWindowProcA
CreateWindowExA
EndDialog
GetClientRect
CloseWindow
GetClassInfoA
GetDlgItem
rasapi32
RasDialA
DwCloneEntry
DwRasUninitialize
RasDeleteEntryA
DwEnumEntryDetails
catsrvut
DllGetClassObject
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ