Static task
static1
Behavioral task
behavioral1
Sample
572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854.exe
Resource
win7-20220715-en
General
-
Target
572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854
-
Size
113KB
-
MD5
7611776a4693c2b77957cc213036345d
-
SHA1
6e176c3f6db12a08674633252085bd96eac3de17
-
SHA256
572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854
-
SHA512
61deddbb3444e48fec1b2dc3d87b3c3a2e7d566050e7be64670d3cda12e93b4373d59603755c59c7d77e7f3ea692396a0d55fca5b8d21f0498c9d84215b1248e
-
SSDEEP
1536:JNe4Qv6pcMyO+pl/TsX8VExHnFg6+qi+U+Q1hitL9qz:jDQHhO+pcHFf+TjR1hKs
Malware Config
Signatures
Files
-
572364a36ab856bf456d4bbe0c1e2727690bb7806a3311087e79e573cdb56854.exe windows x86
f8fa519bfebe9c3d70a84acea26d66fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetCommandLineA
ClosePrivateNamespace
GetUserDefaultLCID
GetCommTimeouts
GetTickCount
GetTimeZoneInformation
WaitForSingleObject
InterlockedDecrement
GetCurrentProcess
GlobalAlloc
advapi32
GetNamedSecurityInfoW
CryptSetProvParam
RegDisablePredefinedCache
user32
FlashWindow
RealChildWindowFromPoint
GetCaretPos
IsMenu
GetWindowLongA
CharNextW
GetDoubleClickTime
MapWindowPoints
WindowFromDC
gdi32
SetMapperFlags
winscard
SCardConnectW
winmm
timeGetTime
waveInStop
ntdll
memcpy
oleaut32
VarUI1FromStr
VarBoolFromI8
ole32
CoFreeUnusedLibrariesEx
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT4 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ