Static task
static1
Behavioral task
behavioral1
Sample
1daaf323ceb43bf579988cac01b67100f08c19886b551995f0736ccca55aa33c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1daaf323ceb43bf579988cac01b67100f08c19886b551995f0736ccca55aa33c.exe
Resource
win10v2004-20220812-en
General
-
Target
1daaf323ceb43bf579988cac01b67100f08c19886b551995f0736ccca55aa33c
-
Size
131KB
-
MD5
1699405189f2b4014526940fbf5cf8a0
-
SHA1
90c35f61b9564dd27a18bec211fa60242d8de1c7
-
SHA256
1daaf323ceb43bf579988cac01b67100f08c19886b551995f0736ccca55aa33c
-
SHA512
fad70705424caf7f563e2901e9e3d9584d9d47f8d553d58c39864c4a5ba89ebf78612a648f5cd45a13a27a3ab96ba5951200c547018aaafd1390094bb93db03a
-
SSDEEP
3072:wzOxncrgPiDLlU89Giw9WwLMK0hG3qaeeZpFJ+/qtg6mZ8Vr:dCpU8GihGPemW/ig+
Malware Config
Signatures
Files
-
1daaf323ceb43bf579988cac01b67100f08c19886b551995f0736ccca55aa33c.exe windows x86
a1d1cbacae79b293e8378cf9ae2706a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PrepareTape
LoadModule
FindFirstFileW
GetCompressedFileSizeW
ExpandEnvironmentStringsW
GetFileInformationByHandle
GetShortPathNameA
ConnectNamedPipe
GetNumberFormatW
QueueUserWorkItem
CreateDirectoryExA
QueueUserAPC
GetSystemDefaultUILanguage
GetTempFileNameA
GetQueuedCompletionStatus
GlobalUnWire
LocalShrink
FindFirstFileA
GetDiskFreeSpaceExA
SetCurrentDirectoryA
GetComputerNameExW
CreateEventW
GetDevicePowerState
GetLongPathNameW
CreateWaitableTimerW
GetSystemPowerStatus
RequestDeviceWakeup
lstrcatW
CompareStringA
SetProcessAffinityMask
CloseHandle
version
VerFindFileW
VerFindFileA
VerInstallFileA
user32
InvalidateRect
LookupIconIdFromDirectory
DdeQueryStringA
GetKeyboardLayoutNameW
SendIMEMessageExA
CharToOemW
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 375B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 381B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE