Static task
static1
Behavioral task
behavioral1
Sample
4352eb0ff54aefd870b63049d92e2eeb32747b798fcedd1b61e8a0704295a5ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4352eb0ff54aefd870b63049d92e2eeb32747b798fcedd1b61e8a0704295a5ac.exe
Resource
win10v2004-20220901-en
General
-
Target
4352eb0ff54aefd870b63049d92e2eeb32747b798fcedd1b61e8a0704295a5ac
-
Size
239KB
-
MD5
76622dd2eeb3bb4adadfbcf6a0e334b1
-
SHA1
01afd584b858bf7af5d024dde8bf42bf52ccda94
-
SHA256
4352eb0ff54aefd870b63049d92e2eeb32747b798fcedd1b61e8a0704295a5ac
-
SHA512
c3a4f6435ae751c31b9258110a2f32def9c37dc1170dafa03bd539b9511cf72b772314fffacac9119002f1326502ef6177d0d07ac959f1ef0c5653533e6fb42f
-
SSDEEP
6144:85S3mcxoWwTrCHJGaPLNMJs/1lDxcc05uf6/bBSz:8Q3mcOWwWG2NMJstdxv0MfqG
Malware Config
Signatures
Files
-
4352eb0ff54aefd870b63049d92e2eeb32747b798fcedd1b61e8a0704295a5ac.exe windows x86
33937f770706db025e535bc3c5e3aa43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetErrorMode
TerminateProcess
GetProcAddress
LoadLibraryA
lstrcmpiW
OutputDebugStringA
CreateThread
lstrcpyA
GetModuleHandleW
GetStartupInfoW
user32
GetActiveWindow
FindWindowA
OpenClipboard
wintrust
WinVerifyTrust
msvcrt
_adjust_fdiv
__p__commode
__setusermatherr
_initterm
_controlfp
_except_handler3
__set_app_type
__wgetmainargs
malloc
_exit
_XcptFilter
exit
_wcmdln
__p__fmode
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 225KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ