Static task
static1
Behavioral task
behavioral1
Sample
c588494c43cd458c6ab33d65ca81f619d908e7f7a58fe735dc5d09a47571bcd9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c588494c43cd458c6ab33d65ca81f619d908e7f7a58fe735dc5d09a47571bcd9.exe
Resource
win10v2004-20221111-en
General
-
Target
c588494c43cd458c6ab33d65ca81f619d908e7f7a58fe735dc5d09a47571bcd9
-
Size
769KB
-
MD5
d6bdb64e8231ac9079aa3712a5896e6f
-
SHA1
7e99d9de7c0ae8bea53c96f57bb68dafdbee8f07
-
SHA256
c588494c43cd458c6ab33d65ca81f619d908e7f7a58fe735dc5d09a47571bcd9
-
SHA512
4c584b7e76217c525796ce917f5b76d4f8d2204ad2cb0fe24d8fb6ac8c1ebfb50d697e351d89db5919ef1ccdbd3bfd4da9097aa0bb43e1fd2d91a5b837b8f3a4
-
SSDEEP
24576:eHU1qAim+gDGXzsaz4h7CwgMywvlltEs5K0Pc:eIieGXDzUNNLK0E
Malware Config
Signatures
Files
-
c588494c43cd458c6ab33d65ca81f619d908e7f7a58fe735dc5d09a47571bcd9.exe windows x86
61f9255fa842dd1476eda688ceff5abb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GetFileSize
SetStdHandle
Sleep
CloseHandle
RemoveDirectoryW
WriteFile
GetCommandLineW
ReleaseMutex
VirtualProtectEx
CreateFileA
OpenEventW
CreateMutexA
GetDriveTypeA
RemoveDirectoryW
GetModuleHandleA
CreateDirectoryW
DeleteFileA
GetVersion
ReleaseSemaphore
lstrlenA
WriteConsoleW
HeapSize
CloseHandle
CreateFileMappingW
user32
DestroyMenu
GetClassInfoA
FindWindowA
DrawTextW
DestroyMenu
PeekMessageA
MessageBoxA
DispatchMessageA
IsZoomed
GetWindowLongA
IsWindow
CreateIcon
GetSysColor
efsadu
EfsDetail
EfsDetail
EfsDetail
EfsDetail
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ