Static task
static1
Behavioral task
behavioral1
Sample
c473414d8b2cfc73f989f805f48dca2698e0c45dc353f83cff78e2e843349b6f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c473414d8b2cfc73f989f805f48dca2698e0c45dc353f83cff78e2e843349b6f.exe
Resource
win10v2004-20221111-en
General
-
Target
c473414d8b2cfc73f989f805f48dca2698e0c45dc353f83cff78e2e843349b6f
-
Size
330KB
-
MD5
0c3ddc3ebecffa9db118c77b3d0a5668
-
SHA1
372a59583ec4b221d577effe409a9268a6ed7d4c
-
SHA256
c473414d8b2cfc73f989f805f48dca2698e0c45dc353f83cff78e2e843349b6f
-
SHA512
1f52968708bca74ef3b93bc046937945e03b1d5db46f9442066616a30128e1eeb52d49e579cbad45a3892862ffbabc6fba6f274bd3788dd94ee4029642a5645e
-
SSDEEP
6144:fLHnviIkzIsHFd1ZN6a4p8EuOHcjEoeuNzlE5EjuMcd9YX+zl1JzV1LTGNCj18:THvEzI+b1aa4p7uPjEhu3EckdSQ1Jzvu
Malware Config
Signatures
Files
-
c473414d8b2cfc73f989f805f48dca2698e0c45dc353f83cff78e2e843349b6f.exe windows x86
d2fe2356f5ae77d10e68fcdaa683e9bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
WaitForMultipleObjects
SuspendThread
lstrlenA
GetStdHandle
WaitForSingleObject
GetSystemDefaultLangID
InterlockedExchange
CompareFileTime
HeapCreate
GetConsoleCP
GetTickCount
LoadLibraryExA
AddAtomA
CloseHandle
GetCommandLineA
HeapReAlloc
GetProfileIntA
VirtualProtect
GlobalUnlock
GetModuleHandleA
user32
ModifyMenuA
CreateMenu
GetKeyState
DispatchMessageA
DestroyMenu
EqualRect
CreateCaret
GetMenuStringA
IsDialogMessage
GetDlgItem
InvertRect
DialogBoxParamA
CreateCursor
CopyRect
MessageBoxA
GetKeyboardLayout
CopyImage
InsertMenuA
SetPropA
SubtractRect
DrawCaption
SetWindowPos
FindWindowA
CreateIcon
EnableScrollBar
netapi32
DsRoleCancel
DsGetDcOpenA
DsGetDcNameA
DsRoleFreeMemory
DsGetDcNextA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ