Static task
static1
Behavioral task
behavioral1
Sample
2979d2956b841f85a3646ff6e9654ac8aa8c2bf36fe523bdbde7278b20259ffb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2979d2956b841f85a3646ff6e9654ac8aa8c2bf36fe523bdbde7278b20259ffb.exe
Resource
win10v2004-20220812-en
General
-
Target
2979d2956b841f85a3646ff6e9654ac8aa8c2bf36fe523bdbde7278b20259ffb
-
Size
810KB
-
MD5
48813c8859976639f007180d1acd5ca4
-
SHA1
c88151478f732cefbfb684c112fa824889579406
-
SHA256
2979d2956b841f85a3646ff6e9654ac8aa8c2bf36fe523bdbde7278b20259ffb
-
SHA512
b5a8975eeba6fbac4e2a7b7b0db63e8682e2d9b8b2c9298d6f2a8c452841bf4cd38abb7056561f505a450397e3f7ebc55bce9e4e28829614416dfc88b6a2c905
-
SSDEEP
24576:HIRmeO04WgaiDlTfjWmqnPOp+m5wOkIkZo:Smjc7IlTf6jGp++kVZ
Malware Config
Signatures
Files
-
2979d2956b841f85a3646ff6e9654ac8aa8c2bf36fe523bdbde7278b20259ffb.exe windows x86
2d9027eb519f885b44f6f3989a7dd83e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileSize
ReadFile
GetModuleHandleA
IsBadWritePtr
GetStartupInfoW
SetConsoleTitleA
SetFileTime
SetFileTime
CreateEventA
lstrcpyW
GetStringTypeA
LoadLibraryA
LeaveCriticalSection
GetExitCodeProcess
CloseHandle
HeapSize
InterlockedExchange
SetFileTime
HeapCreate
GetLastError
lstrcatA
mstscax
DllRegisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
shell32
DuplicateIcon
SHGetSettings
DllUnregisterServer
ExtractIconA
StrChrA
SHGetMalloc
ShellMessageBoxW
SHGetDiskFreeSpaceA
DragFinish
ShellAboutA
DragAcceptFiles
DragQueryFileA
SHFree
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 798KB - Virtual size: 798KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ