Static task
static1
Behavioral task
behavioral1
Sample
411cc0e848e37589d5af9d8245f2c157ca00e0e0e51276aa43b4258612770eff.exe
Resource
win7-20220414-en
General
-
Target
411cc0e848e37589d5af9d8245f2c157ca00e0e0e51276aa43b4258612770eff
-
Size
200KB
-
MD5
35a217cc26ef71d7e77df6ecc613a301
-
SHA1
fe741cdb83b427bfd68ea9e96149e6faabbb6d4c
-
SHA256
411cc0e848e37589d5af9d8245f2c157ca00e0e0e51276aa43b4258612770eff
-
SHA512
b9e9ac4535bb6f6ab9cab81df835a44355acac6461a2933ba1faa598abe9bbe4a086bd34b3e37ff270c34e5740223d43b0f3d57c95fff56b88da7958f8eb2bc5
-
SSDEEP
3072:MVbhf2cIFAGgfMkPCYkq/XhgQphhfkrG9wSTNbPkiqg8PypOT:Cbhf2VmGGVkqvhgQ2rGBbPx
Malware Config
Signatures
Files
-
411cc0e848e37589d5af9d8245f2c157ca00e0e0e51276aa43b4258612770eff.exe windows x86
0e891b704c4ea5726af5162135671e02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winscard
SCardListReaderGroupsA
user32
SendMessageW
GetLastInputInfo
GetMessageExtraInfo
kernel32
GetCommandLineA
GetProcessVersion
IsValidCodePage
CloseHandle
GetSystemTime
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ