Static task
static1
Behavioral task
behavioral1
Sample
2409712d24813c929978a62ae89e272f15e3bdb595521ffc138b0629c85d5a56.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2409712d24813c929978a62ae89e272f15e3bdb595521ffc138b0629c85d5a56.exe
Resource
win10v2004-20220901-en
General
-
Target
2409712d24813c929978a62ae89e272f15e3bdb595521ffc138b0629c85d5a56
-
Size
64KB
-
MD5
7ab6b9646b1d826f1c1b150255457ceb
-
SHA1
e3c369ad9d41b1a022df597d76a23c991a3d7855
-
SHA256
2409712d24813c929978a62ae89e272f15e3bdb595521ffc138b0629c85d5a56
-
SHA512
118e4ba45925cb09f5664fcef6415fada8dd3eabb005dcad310f0302f93bee6c0ddab289e6ecd467d7a1b6ad606e1f477b96cc6e7c8a7ac48448c8551d87031c
-
SSDEEP
768:kmgPUyNAP3o7m6wTrLU+umY/HgmMOzuvpK7ACQPdr6Dio:kbPWPAmenYBOzmRP5No
Malware Config
Signatures
Files
-
2409712d24813c929978a62ae89e272f15e3bdb595521ffc138b0629c85d5a56.exe windows x86
498ddfd5177d8baff14dc59425a1bd49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
SetHandleCount
LoadResource
FindResourceA
GetTempPathA
WaitForSingleObject
CreateProcessA
Process32Next
CloseHandle
CreateToolhelp32Snapshot
Sleep
TerminateProcess
GetCurrentThreadId
ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
CreateThread
GetLastError
CreateMutexA
GetStartupInfoA
GetModuleHandleA
FreeResource
DeleteFileA
LoadLibraryA
GetProcAddress
Process32First
FreeLibrary
user32
PostThreadMessageA
GetMessageA
ShowCursor
MessageBoxA
CreateDesktopA
GetInputState
CloseDesktop
GetDesktopWindow
GetWindow
GetWindowTextA
FindWindowExA
GetThreadDesktop
PostMessageA
wsprintfA
SetThreadDesktop
advapi32
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_except_handler3
_controlfp
_strcmpi
rename
_exit
_XcptFilter
exit
shlwapi
PathRemoveFileSpecA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ