Static task
static1
Behavioral task
behavioral1
Sample
a38ae2eb1b59eb8199e6b4f9e979eab9cb33003f8d0553c14b2b6baefe720bff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a38ae2eb1b59eb8199e6b4f9e979eab9cb33003f8d0553c14b2b6baefe720bff.exe
Resource
win10v2004-20220812-en
General
-
Target
a38ae2eb1b59eb8199e6b4f9e979eab9cb33003f8d0553c14b2b6baefe720bff
-
Size
438KB
-
MD5
78dd76b9cc3b34931125da27b2ed59c0
-
SHA1
5ddff8f80d92d8e9c3fbaf03298aa2ec82cf40a7
-
SHA256
a38ae2eb1b59eb8199e6b4f9e979eab9cb33003f8d0553c14b2b6baefe720bff
-
SHA512
d634b2036b5c0a1ff67a5963b8d1f21cf152b08305728a25f26075977d6747d56b08bf4b334b16df70d4bd92e0b08988a2763a71a2fbfcf08db73537f9065939
-
SSDEEP
12288:Pz0aYuoqgNb+kZlhT6m7PcEBJDBRZLkqY:z+B6EBQL
Malware Config
Signatures
Files
-
a38ae2eb1b59eb8199e6b4f9e979eab9cb33003f8d0553c14b2b6baefe720bff.exe windows x86
908f3188f426a36457d6ed8aded3c5a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlGetElementGenericTableAvl
advapi32
SetSecurityDescriptorOwner
user32
GetProcessWindowStation
GetCursor
kernel32
GetCurrentThread
Sections
.text Size: 431KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE