Static task
static1
Behavioral task
behavioral1
Sample
d4896efdcc957600c1d4dd9950e7306346ec010f3b4741fc6204aab695ca52f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4896efdcc957600c1d4dd9950e7306346ec010f3b4741fc6204aab695ca52f7.exe
Resource
win10v2004-20220901-en
General
-
Target
d4896efdcc957600c1d4dd9950e7306346ec010f3b4741fc6204aab695ca52f7
-
Size
101KB
-
MD5
8347b8fcf5265039d314275559d6b8df
-
SHA1
0540e96d6f97547e95ae07611eab3fa8843dc49d
-
SHA256
d4896efdcc957600c1d4dd9950e7306346ec010f3b4741fc6204aab695ca52f7
-
SHA512
05bbb7206c6fee465edd91f27ecd03d3268ce01eed36b14988a81314c9f74cbc5712651576135e0a4ac1e3ab51eff742423bf73b73eb5a4b45cceac4ca3ccf85
-
SSDEEP
3072:yBapA0q4An3aCi96eAfiSitx0RAPBpdn+J:8WbA3BigZfiSfGfY
Malware Config
Signatures
Files
-
d4896efdcc957600c1d4dd9950e7306346ec010f3b4741fc6204aab695ca52f7.exe windows x86
b77d6c2ba7f41d42e8b465462d45aa18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
FreeEnvironmentStriwTextW
R
W
dDialog
ect
rW
agePumpHook
etScrollPos
cked
onEx
rsetInfo
DeleteObject
extOutW
reateCompatibleDC
tte
ntPoint32W
tTextExtentPointW
ointW
idbrush
Blt
ntIndirectW
W
C
W
kColor
MoveToEx
8
ngle
lt
ll
op
eateAgentSessionW
ssage
honeGetButtonInfo
Info
lineGetAddressCaps
dressCaps
tDevConfigW
gW
SetAgentStateEx
tstateex
neConfigDialogEdit
logEdit
(
�
aikduh.dll
hmunHdlvpvwJxyvpsdWmc
dWmc
qfgt
Gh
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aus Size: 512B - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ