Static task
static1
Behavioral task
behavioral1
Sample
1b42f4d5b0db1d355bd373e980683be621e37a2929c7090c7bd82183cbe18d48.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1b42f4d5b0db1d355bd373e980683be621e37a2929c7090c7bd82183cbe18d48.exe
Resource
win10v2004-20221111-en
General
-
Target
225df32045d29c29b60c0f8998a51402.bin
-
Size
780KB
-
MD5
340778984439bd14e6e146d2d27c264f
-
SHA1
a7c91d3a1c83835482ab7392d2452933657d87ef
-
SHA256
46be7cfcb628b2121de27121f1f2bae68807b996258497d54b2cff8416667217
-
SHA512
d8c15a6d5a007943bb7c683f4fd6f85f06504026d407b92661dbee34bc1a0b9042de8cbe2095072847891a8da2d8bfa04bedcbd3044b036432fbf0de033b4903
-
SSDEEP
24576:tRpbOgCPO4nH8ifT/6euXNmvwB5pf39gRH+:t7BqhnFTiTXFv6x+
Malware Config
Signatures
Files
-
225df32045d29c29b60c0f8998a51402.bin.zip
Password: infected
-
1b42f4d5b0db1d355bd373e980683be621e37a2929c7090c7bd82183cbe18d48.exe.exe windows x86
Password: infected
9165ea3e914e03bda3346f13edbd6ccd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
user32
MessageBoxA
wsprintfA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ