Static task
static1
Behavioral task
behavioral1
Sample
b64407488ef950499bd22b06738a9c0b54d655a6429161a16e761c6ff062ec38.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b64407488ef950499bd22b06738a9c0b54d655a6429161a16e761c6ff062ec38.exe
Resource
win10v2004-20220812-en
General
-
Target
b64407488ef950499bd22b06738a9c0b54d655a6429161a16e761c6ff062ec38
-
Size
22KB
-
MD5
ee5a415bf1ba99728346d4aabad7cafe
-
SHA1
edf404f175f50e338fd9fc1925536e54701935bf
-
SHA256
b64407488ef950499bd22b06738a9c0b54d655a6429161a16e761c6ff062ec38
-
SHA512
3642d1add0f5a9b4403c6273148191d65c371e4584ab69447b82f6f0261474b8f0a9f6bd652bf8e39124944f3c701a24cb28ed91f2ffae2d0bc3aa163abab602
-
SSDEEP
384:2cZdExILT62Xng4CB1+ff+mC6VNwUK5LRuf1Zdp1Rj5hp:2DwHXg4uiWmHVNwlLRepT
Malware Config
Signatures
Files
-
b64407488ef950499bd22b06738a9c0b54d655a6429161a16e761c6ff062ec38.exe windows x86
2ca694265548a3f61f0db5dd0e9f4298
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
VirtualAlloc
HeapSize
SetLastError
ResumeThread
DeleteAtom
ExitProcess
DeleteFileA
SetFileAttributesA
GetFileSize
CloseHandle
IsBadReadPtr
EnterCriticalSection
GetCommandLineA
GetExitCodeThread
SetLastError
CreateFileA
GetVersion
GetCurrentDirectoryA
FindAtomW
GetEnvironmentVariableA
GetStdHandle
GetFileAttributesA
GetModuleHandleA
WaitForSingleObject
shell32
DragFinish
DllUnregisterServer
SHGetMalloc
ShellMessageBoxA
SHGetSettings
ShellAboutA
DragQueryFileA
DuplicateIcon
SHFree
DragAcceptFiles
ExtractIconA
SHFree
StrChrA
umdmxfrm
GetXformInfo
GetXformInfo
GetXformInfo
GetXformInfo
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE