Static task
static1
Behavioral task
behavioral1
Sample
813aecbb9b72191a504868938268395dd25e3c7cf872159463cef74e120d0767.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
813aecbb9b72191a504868938268395dd25e3c7cf872159463cef74e120d0767.exe
Resource
win10v2004-20220812-en
General
-
Target
813aecbb9b72191a504868938268395dd25e3c7cf872159463cef74e120d0767
-
Size
370KB
-
MD5
d6c5add7a421d5c6bd0db65a64dbfa25
-
SHA1
6bad3bd781db2d2897d02537b9af9b23da7561dc
-
SHA256
813aecbb9b72191a504868938268395dd25e3c7cf872159463cef74e120d0767
-
SHA512
ce8cefbadc8fa4ffcbbca39b3429dd1d03b390b72a452a5284692c7091b51e1710e31c18f618840f16e626ebca53e001c33d1c43d20b4db81c82a44eab21fdbd
-
SSDEEP
6144:2k9kmoMOXSyHyC3jRSaZjmi/KaeF/ae/X7FwHqYLAzBN:3am8XVHjNSaZy0KaA/auX0h4
Malware Config
Signatures
Files
-
813aecbb9b72191a504868938268395dd25e3c7cf872159463cef74e120d0767.exe windows x86
c17932e7ab29ec450427d30475d52588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
DeleteAtom
lstrlenW
GlobalFree
HeapCreate
VirtualQuery
GetExitCodeProcess
FindResourceA
GetModuleHandleA
SetLastError
GlobalUnlock
GetCurrentThreadId
GetStdHandle
TlsGetValue
GetVersion
SetEnvironmentVariableA
CreateMutexA
CloseHandle
ReleaseMutex
LoadLibraryExW
user32
GetDlgItem
CheckRadioButton
DrawEdge
FillRect
DrawMenuBar
CreateWindowExA
GetIconInfo
DispatchMessageA
CallWindowProcA
SetFocus
IsWindow
GetDC
CreateMenu
ntshrui
IsPathSharedW
SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
IsPathSharedA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ