Static task
static1
Behavioral task
behavioral1
Sample
f37e61d0a2fd545453b2167f6b8508f857b74852ab1a3f80b90374388d44da9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f37e61d0a2fd545453b2167f6b8508f857b74852ab1a3f80b90374388d44da9c.exe
Resource
win10v2004-20220812-en
General
-
Target
f37e61d0a2fd545453b2167f6b8508f857b74852ab1a3f80b90374388d44da9c
-
Size
361KB
-
MD5
b53ff5a02754db744858940bd1d2e92c
-
SHA1
ebd290c1dd1b4eefea57f2c4ee72fbf53d0dff7c
-
SHA256
f37e61d0a2fd545453b2167f6b8508f857b74852ab1a3f80b90374388d44da9c
-
SHA512
ee74207f92579945d25c8ef548380579078d20e635d1d8508c3f55581b275ff2e8c9caf732645334788cb65c2985ea65c17700c2596a40859beda7218df68efc
-
SSDEEP
6144:PuWGFjwLeYty9eaKDn4j4veam2RU38YoRI1vkvY1LHVHgdib07mAPvh1mMw5gZFG:PDqjQAep48ekCruICvYwdc3APvjw8F65
Malware Config
Signatures
Files
-
f37e61d0a2fd545453b2167f6b8508f857b74852ab1a3f80b90374388d44da9c.exe windows x86
8d80372b2e342b95304375f8094202c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAtomNameA
HeapCreate
IsDebuggerPresent
LoadLibraryExA
HeapDestroy
WaitForSingleObject
GetConsoleCP
VirtualProtect
TlsGetValue
GetCommandLineA
PeekConsoleInputA
lstrlenA
LockResource
GetSystemTime
GetModuleHandleA
GlobalMemoryStatus
InterlockedExchange
GetUserDefaultLCID
ResumeThread
GlobalSize
GetACP
user32
wsprintfA
CreateIcon
EndPaint
GetWindow
BeginPaint
SetForegroundWindow
ReleaseDC
GetClassNameA
DrawTextA
AnyPopup
GetParent
FillRect
FrameRect
DragDetect
ShowWindow
GetTitleBarInfo
GetCursorPos
GetFocus
GetDC
ntshrui
GetLocalPathFromNetResourceA
DllCanUnloadNow
DllGetClassObject
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing
wshtcpip
WSHIoctl
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ