Static task
static1
Behavioral task
behavioral1
Sample
f2f629f83ef0fd3f854cda947fa5bd4e8e1404502002ddb281683b470e5f0a68.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2f629f83ef0fd3f854cda947fa5bd4e8e1404502002ddb281683b470e5f0a68.exe
Resource
win10v2004-20221111-en
General
-
Target
f2f629f83ef0fd3f854cda947fa5bd4e8e1404502002ddb281683b470e5f0a68
-
Size
289KB
-
MD5
5c27aceeb47d91663c1932e8b1b8921e
-
SHA1
13b9b883e8f15dc254ea503d5d840c0bc9e32cae
-
SHA256
f2f629f83ef0fd3f854cda947fa5bd4e8e1404502002ddb281683b470e5f0a68
-
SHA512
16ef13d5c7e8316c17b323f9f913f8e91bc1299cc859cf9d8d31aae435bdd41c5dd1e0cfd6280e34783d03ed547142f5ab58611143f1024bba8d97f3662aa0e1
-
SSDEEP
6144:H3EDHUU1LaqMRHQECf0iDTNGuxL6+a9+dsDnhp4vq/N0pbeQ:H3Fua3HkXTNGiLBSnhpaq1a9
Malware Config
Signatures
Files
-
f2f629f83ef0fd3f854cda947fa5bd4e8e1404502002ddb281683b470e5f0a68.exe windows x86
86638eb0140f6e71297e91fa72a06224
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetDriveTypeA
LoadLibraryExA
GlobalDeleteAtom
GlobalAddAtomA
Sleep
GlobalFree
RaiseException
HeapCreate
GetLocaleInfoA
GlobalUnlock
GetLastError
VirtualProtect
SetErrorMode
GetACP
InterlockedExchange
CloseHandle
LockResource
GetStdHandle
SetConsoleOutputCP
FileTimeToLocalFileTime
user32
SetForegroundWindow
ReleaseDC
OemToCharBuffA
ValidateRect
IsIconic
ClipCursor
GetParent
BeginPaint
GetClassNameA
GetActiveWindow
GetFocus
GetWindowTextA
EndPaint
DrawEdge
GetWindow
DrawTextA
GetMenuItemInfoA
ShowWindow
GetCursorPos
ntdsapi
DsFreeNameResultA
DsCrackNamesA
DsIsMangledDnA
DsGetSpnA
DsBindA
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ