Static task
static1
Behavioral task
behavioral1
Sample
93942e48653e2050bd6296d69d966e0b1e1b2eb2d3e9bf862bcbf32c9b1080bd.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
93942e48653e2050bd6296d69d966e0b1e1b2eb2d3e9bf862bcbf32c9b1080bd.exe
Resource
win10v2004-20220414-en
General
-
Target
93942e48653e2050bd6296d69d966e0b1e1b2eb2d3e9bf862bcbf32c9b1080bd
-
Size
196KB
-
MD5
5ee21251ebe0529aed293f636286527a
-
SHA1
341767eb4afbf9a8dd99cd1a50ee93fb4c88e4dc
-
SHA256
93942e48653e2050bd6296d69d966e0b1e1b2eb2d3e9bf862bcbf32c9b1080bd
-
SHA512
987ea7e3a848f93c8b0c3edc88fc205c24df9c4d953eff378439574f9a0c8256695d87248d3b8216fb0f662c643e2168635569ee845df1386974a14592cc0386
-
SSDEEP
3072:3CQr6H/0jHgO+52xfPUKF983y2IsbHD01RNkWzLkQ83xZR3Uhk9BucOxrpwoSLGf:yQh9tRPUy83yzZB8l37JOdpwzo2a
Malware Config
Signatures
Files
-
93942e48653e2050bd6296d69d966e0b1e1b2eb2d3e9bf862bcbf32c9b1080bd.exe windows x86
81e835c67a626d73384cd1dbd81beebd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strlen
kernel32
GetModuleHandleA
HeapCreate
VirtualProtect
HeapDestroy
ExitProcess
GetConsoleTitleA
SetProcessWorkingSetSize
VirtualAlloc
GlobalFlags
RemoveDirectoryA
CreateIoCompletionPort
GetMailslotInfo
EnumDateFormatsA
InitAtomTable
GetFileSize
CallNamedPipeA
GlobalHandle
HeapAlloc
HeapFree
HeapReAlloc
winspool.drv
PrinterProperties
AbortPrinter
user32
MessageBeep
SetMenu
DdeInitializeA
ChangeClipboardChain
MessageBoxA
DdeReconnect
OpenClipboard
GetPropA
GetDesktopWindow
GetMenuItemCount
UnloadKeyboardLayout
DdeFreeDataHandle
EndDialog
ReuseDDElParam
gdi32
CreateBitmap
InvertRgn
CreateRectRgn
StretchBlt
CreateFontA
advapi32
RegUnLoadKeyA
DeregisterEventSource
OpenThreadToken
AreAllAccessesGranted
ImpersonateNamedPipeClient
InitiateSystemShutdownA
BackupEventLogA
comctl32
ImageList_Create
imm32
ImmSimulateHotKey
mpr
WNetDisconnectDialog
wininet
FtpPutFileA
winmm
midiOutSetVolume
mciSendCommandA
Sections
.code Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kjn Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ