Static task
static1
Behavioral task
behavioral1
Sample
111.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
111.exe
Resource
win10v2004-20220721-en
General
-
Target
111
-
Size
4.9MB
-
MD5
f4baf22ddb455707b91fec0ee48257fc
-
SHA1
cd67e9d5e6d566e27af68592c85afad853e7ae97
-
SHA256
79fd5a7e4a09042cae5f0f54233085f35135051a5ba3845a4ffbf740e160205a
-
SHA512
d6dc37d9de540e2c2b7b7c97b5e7b9e9929703cfc47d64cdfcc2871d53bc0981b93a90eafb4e15caffe7886d89d797aba69bada36aefff1f827b964b63ad1b66
-
SSDEEP
98304:eNlQSZyqVz64Z+8q1N+ugUW5G2s6dwcyyC6/1P0bRyfyA0+GvaQ:OuCVz64XqYZIedwcyyZNP0bGyA0+0
Malware Config
Signatures
Files
-
111.exe windows x86
172750858dcc0719eed08c952858023c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
ole32
OleInitialize
oleaut32
SafeArrayCreate
wtsapi32
WTSSendMessageW
user32
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
Sections
.text Size: - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp@!@! Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp@!@! Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ