Static task
static1
Behavioral task
behavioral1
Sample
316214c4105621f607915054cadcc149cbb6e1e140d214ed3a0f2b8b72e9e99b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
316214c4105621f607915054cadcc149cbb6e1e140d214ed3a0f2b8b72e9e99b.exe
Resource
win10v2004-20220812-en
General
-
Target
316214c4105621f607915054cadcc149cbb6e1e140d214ed3a0f2b8b72e9e99b
-
Size
66KB
-
MD5
6a502ab953aa9d73691099beaa26b66e
-
SHA1
5597df81f098035ebc7ee21f5e8b4ed2d9cfc2ca
-
SHA256
316214c4105621f607915054cadcc149cbb6e1e140d214ed3a0f2b8b72e9e99b
-
SHA512
7e84f3df72b2d3461190eb2e3c7f4ca645456f88d8e68f059e6cb7593167ff43da0e4d31192b5ede98269ad39fdddc5753e925b11ca5f09b93d25edb5f252267
-
SSDEEP
1536:RT00zKChSdWtIy6rAHN7BWG8lth24h30K:i02C8WttMAHN7BRythzh
Malware Config
Signatures
Files
-
316214c4105621f607915054cadcc149cbb6e1e140d214ed3a0f2b8b72e9e99b.exe windows x86
92ed5823ad1c26bd5095b81aa5ed0d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
Imports
user32
GetWindowWord
FlashWindow
ReleaseDC
GetAncestor
InsertMenuW
GetWindowRgn
IsWindowVisible
ShowCursor
GetWindowDC
kernel32
GetLastError
CreateFileA
GetEnvironmentVariableA
GetTickCount
CreateDirectoryA
IsBadCodePtr
OpenThread
InterlockedDecrement
_lread
QueueUserAPC
_lread
mapi32
BMAPIAddress
BMAPIDetails
BMAPIFindNext
BMAPIGetAddress
BMAPIGetReadMail
BMAPIReadMail
BMAPIResolveName
BMAPISaveMail
BMAPISendMail
BuildDisplayTable@40
mpr
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
I_MprSaveConn
Sections
.text Size: 17KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 44KB
IMAGE_SCN_MEM_WRITE