Static task
static1
Behavioral task
behavioral1
Sample
f955da024737f1aae0cde3d81f943313e0113415c4c32b05d14f2098ec69c2d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f955da024737f1aae0cde3d81f943313e0113415c4c32b05d14f2098ec69c2d8.exe
Resource
win10v2004-20221111-en
General
-
Target
f955da024737f1aae0cde3d81f943313e0113415c4c32b05d14f2098ec69c2d8
-
Size
8KB
-
MD5
b256fa3b277cc3b7e5c27d2c2d824346
-
SHA1
b9a473bead4678a8387162c1fb42e8dfab65f013
-
SHA256
f955da024737f1aae0cde3d81f943313e0113415c4c32b05d14f2098ec69c2d8
-
SHA512
efd8145a3b7903b80007b5d7347482d022c4b5c79a53de2903da362242c6ce988efe8a7a9c64bef5836cd4583839471234a26cef161fdc4d024b32225b48c028
-
SSDEEP
192:qdTS8BcItIrVyViheoEInmEtX5dQKxYx96fTCWn26:DUyrVyViheo1nmEtrxMkd/
Malware Config
Signatures
Files
-
f955da024737f1aae0cde3d81f943313e0113415c4c32b05d14f2098ec69c2d8.exe windows x86
90bd2cb14cbf29e40ac24faf696a2bbf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GlobalFree
HeapCreate
GetACP
CloseHandle
LoadLibraryExA
FileTimeToLocalFileTime
EnterCriticalSection
Sleep
GlobalUnlock
GetDriveTypeA
GlobalDeleteAtom
SetErrorMode
SetConsoleOutputCP
GetLastError
RaiseException
GetStdHandle
InterlockedExchange
GetLocaleInfoA
LockResource
VirtualProtect
user32
ShowWindow
GetWindow
ValidateRect
DrawTextA
SetForegroundWindow
GetClassNameA
GetCursorPos
ClipCursor
GetFocus
GetActiveWindow
ReleaseDC
OemToCharW
DrawEdge
IsIconic
GetMenuItemInfoA
GetParent
EndPaint
BeginPaint
GetWindowTextA
httpapi
HttpRemoveUrl
HttpAddUrl
HttpInitialize
HttpTerminate
HttpCreateHttpHandle
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ