Static task
static1
Behavioral task
behavioral1
Sample
004e702e5d35824677db92b45d87f812d182ffa441411f4f02648c96f12c30fd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
004e702e5d35824677db92b45d87f812d182ffa441411f4f02648c96f12c30fd.exe
Resource
win10v2004-20220812-en
General
-
Target
004e702e5d35824677db92b45d87f812d182ffa441411f4f02648c96f12c30fd
-
Size
36KB
-
MD5
e56eb5c5b52540786d58741af3f3271b
-
SHA1
5c0d9bccb189cab218f5e8d85d3798f44ba28bdc
-
SHA256
004e702e5d35824677db92b45d87f812d182ffa441411f4f02648c96f12c30fd
-
SHA512
4715474322bce57bb131901f49920aefbe573b036070ddf77682703a467f4567cb2dab042f29eb381547adafdb6853ef07228ac1252ec7fcc9d8e17e5a0b1859
-
SSDEEP
768:tn7USuJQm2RWys5SOt/shkobwtmkiAXyG0E:tn8GjLskAdobwtmkie8E
Malware Config
Signatures
Files
-
004e702e5d35824677db92b45d87f812d182ffa441411f4f02648c96f12c30fd.exe windows x86
8292510460e035014b500037f5ae308c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
SizeofResource
LoadResource
WriteFile
GetTempPathA
lstrcatA
CopyFileA
SetFilePointer
lstrlenA
lstrcpyA
CreateFileA
FindResourceA
GetModuleHandleA
GetCommandLineA
GetEnvironmentStrings
WideCharToMultiByte
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetStringTypeW
GetStringTypeA
GetStartupInfoA
CloseHandle
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
HeapCreate
HeapDestroy
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetACP
GetOEMCP
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
user32
EndDialog
DialogBoxParamA
MessageBoxA
CharUpperBuffA
SetDlgItemTextA
LoadIconA
SendMessageA
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
gdi32
SetTextColor
SetBkMode
CreateSolidBrush
comdlg32
GetSaveFileNameA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ