Static task
static1
Behavioral task
behavioral1
Sample
f1fd6b276fe2d6994ead1578faa4fd1705bf878abc36c7f162bf7834acb08603.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1fd6b276fe2d6994ead1578faa4fd1705bf878abc36c7f162bf7834acb08603.exe
Resource
win10v2004-20220901-en
General
-
Target
f1fd6b276fe2d6994ead1578faa4fd1705bf878abc36c7f162bf7834acb08603
-
Size
317KB
-
MD5
cc8dac47ffd372f5caeb6dddd78870af
-
SHA1
e906a50cc6cc4a8142277f522bfef74ba66448a5
-
SHA256
f1fd6b276fe2d6994ead1578faa4fd1705bf878abc36c7f162bf7834acb08603
-
SHA512
84955faf5c7ec9e4549c2c3fbe05895ba7279a9edeec68319a29b13eaf2e03af1d6736db28ae3e9293af16008ebaed31b3961174f132bc82c7db13a33e32f128
-
SSDEEP
6144:SAov1tm1gq6PBNELGsrIHXuAzW6dkrTwSE0oAR2/y4l9jxSi2ohp5rn4d1L:Sxve1NuNEyBXja6dkrcnqyz9jp/rnk
Malware Config
Signatures
Files
-
f1fd6b276fe2d6994ead1578faa4fd1705bf878abc36c7f162bf7834acb08603.exe windows x86
4ba205e0ceceef07443b841028d76ad3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
SetErrorMode
SizeofResource
CloseHandle
MultiByteToWideChar
LoadLibraryExA
GetStdHandle
GetLastError
Sleep
VirtualProtect
RaiseException
GetTimeFormatA
GetPriorityClass
LockResource
SetConsoleCP
GetACP
GlobalAddAtomA
HeapCreate
GlobalDeleteAtom
GlobalUnlock
EnterCriticalSection
user32
ReleaseDC
GetWindow
GetCursorPos
GetWindowTextA
GetClassInfoExA
GetClassNameA
GetFocus
EndPaint
IsIconic
DrawEdge
GetForegroundWindow
ShowWindow
AnyPopup
GetParent
ValidateRect
GetActiveWindow
DrawMenuBar
BeginPaint
GetMenuItemInfoA
mprapi
MprAdminUserRead
MprAdminUserClose
MprAdminUserOpen
MprAdminUserWrite
MprAdminUserGetInfo
mapi32
MAPILogonEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ