Static task
static1
Behavioral task
behavioral1
Sample
1dd04f68980746cb71556b2b6c5bebf0f8d120051d1a76888d9c7af522f06642.exe
Resource
win7-20220414-en
General
-
Target
1dd04f68980746cb71556b2b6c5bebf0f8d120051d1a76888d9c7af522f06642
-
Size
200KB
-
MD5
53eef713bbf89419afeacb5bf7bddd29
-
SHA1
faed27d721fdbbd70d952c2a0c4639f08b2bcda3
-
SHA256
1dd04f68980746cb71556b2b6c5bebf0f8d120051d1a76888d9c7af522f06642
-
SHA512
045184776c800b7deaad48c42df853e119b33d2d01c952e76801bd7b8fb2b72128f4c559a644fb0e80d6c3c4951aab8a0b6a5ead3d2e24510dd7f1f814d3f719
-
SSDEEP
3072:Jc4hp3oIojUojl7dKjx9ydCN6Y98q+/i++SjrnYgqrx+7g1:Jc4ALjUK4fydCNLWBC
Malware Config
Signatures
Files
-
1dd04f68980746cb71556b2b6c5bebf0f8d120051d1a76888d9c7af522f06642.exe windows x86
762b1304908e7dde82961ff6a397e37e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
RpcServerRegisterIfEx
advapi32
FreeSid
user32
SetWindowRgn
SetWindowContextHelpId
CallNextHookEx
SetCaretBlinkTime
SetCursor
oleaut32
VarI8FromR4
kernel32
DeleteVolumeMountPointW
GetCurrentProcess
LocalFlags
SetHandleInformation
LocalSize
GetStdHandle
GetExitCodeThread
GetCommandLineA
GetProcessVersion
LocalReAlloc
GetCurrentThread
psapi
GetModuleFileNameExW
esent
JetEndSession
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 842B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aei Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9B|PsbB+ Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 845B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ