Static task
static1
Behavioral task
behavioral1
Sample
0d697553cab987c23fa567329b9073d076fa8d573501de634e19ddf474604e81.exe
Resource
win7-20220414-en
General
-
Target
0d697553cab987c23fa567329b9073d076fa8d573501de634e19ddf474604e81
-
Size
136KB
-
MD5
8ebac733f4b1605c3c6a0a3d33b736c5
-
SHA1
39fc6fb560d593971d5c28bb4e34b44b2c928468
-
SHA256
0d697553cab987c23fa567329b9073d076fa8d573501de634e19ddf474604e81
-
SHA512
593501b154ae06bd2aeb5217c716039df4accda7bc185c57f3d945de36b036e14b09ebeaaad869acbd3693288df2996b53e2165040558dfa49303fb9ced57d66
-
SSDEEP
3072:ff6uABedTiFDq2qcrUJdexBKNAeE+LhXT2hkcCAk:KujYqJcrEe0jE+L8
Malware Config
Signatures
Files
-
0d697553cab987c23fa567329b9073d076fa8d573501de634e19ddf474604e81.exe windows x86
6079077ec521fb2db6ebd296013a4722
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
esent
JetInit
advapi32
PrivilegeCheck
user32
GetShellWindow
GetMenuItemCount
IsWindowEnabled
GetScrollPos
DeleteMenu
SetTimer
kernel32
GetLocalTime
IsValidLocaleName
GetProcessAffinityMask
GetCommandLineW
OpenFile
ReplaceFileW
Sections
EVJ Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mr Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TRS Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ