Static task
static1
Behavioral task
behavioral1
Sample
786d25e1075e6354ef8bd5bc31fe9a5f834ca5bf9c471c2a9eccbe1558e0d77d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
786d25e1075e6354ef8bd5bc31fe9a5f834ca5bf9c471c2a9eccbe1558e0d77d.exe
Resource
win10v2004-20220812-en
General
-
Target
786d25e1075e6354ef8bd5bc31fe9a5f834ca5bf9c471c2a9eccbe1558e0d77d
-
Size
4.5MB
-
MD5
ad8006867e327e44532ffcd380dc0573
-
SHA1
1b5fb49e6a722fba886f10012031f9c785d21fcb
-
SHA256
786d25e1075e6354ef8bd5bc31fe9a5f834ca5bf9c471c2a9eccbe1558e0d77d
-
SHA512
974fa47761e6071eb7b369d53da14f74aa664cc9a9b993c17a87ec453e71a5a2f923da1bf4d7cd311acb824495ec881e2dab066728aaa6c0f399724a6ffdca36
-
SSDEEP
98304:xeFGkEaQpCx+L6OkBCNhQ3eFMgZRRIN7xth:TIxE8CNh/JRRm
Malware Config
Signatures
Files
-
786d25e1075e6354ef8bd5bc31fe9a5f834ca5bf9c471c2a9eccbe1558e0d77d.exe windows x86
65f41ef27a6c447a2aa758910ecf43fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenProcess
LocalReAlloc
lstrlenW
GetProcAddress
GetCurrentThread
GetModuleHandleA
EnumDateFormatsW
GetCurrentThreadId
GetCurrentProcessId
LocalFlags
GetCurrentProcess
GlobalFree
SetUnhandledExceptionFilter
advapi32
SetKernelObjectSecurity
ntdll
RtlAddVectoredExceptionHandler
RtlRemoveVectoredExceptionHandler
Sections
G Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
L Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
G Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
G Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
G Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pwd Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
NHM Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Es2 Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Riw Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uUO Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4d3 Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
93f Size: 194KB - Virtual size: 192KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE