Static task
static1
Behavioral task
behavioral1
Sample
18800172b307039b3c4450e9deb66b6890de64a077d37dab4228c621cfa47163.exe
Resource
win7-20220414-en
General
-
Target
18800172b307039b3c4450e9deb66b6890de64a077d37dab4228c621cfa47163
-
Size
140KB
-
MD5
db298d024b82bba33c2744fe5472f217
-
SHA1
3960999598f3e7a42b31357b2b0ea2677d7a81a2
-
SHA256
18800172b307039b3c4450e9deb66b6890de64a077d37dab4228c621cfa47163
-
SHA512
75b3916d0ad21386630e375b0cf4fda4f794dd9b59c2e7ed4869522842650ef2a520682c43c7730d0a45d4dd5015cd797f19d316da0f78fc67a425dd2d14b0d8
-
SSDEEP
3072:bz/+QPI68fDo9baZAuL2UhPNFOcj3NP3y:fpPN9zuL2UhVVrNPC
Malware Config
Signatures
Files
-
18800172b307039b3c4450e9deb66b6890de64a077d37dab4228c621cfa47163.exe windows x86
5c74f8d6a256aa54788883d27883fe76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wintrust
CryptCATAdminCalcHashFromFileHandle
lz32
LZSeek
user32
EqualRect
gdi32
SetPixelV
DeleteDC
GetPath
BeginPath
GetTextCharsetInfo
FrameRgn
GetBoundsRect
kernel32
FreeConsole
lstrlenA
DebugBreak
SetThreadUILanguage
GetThreadId
advapi32
GetSecurityDescriptorLength
CryptCreateHash
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ