Static task
static1
Behavioral task
behavioral1
Sample
753241b2ec4a6cb0b19cb3858934a7b065cad8c2265425750331f854483c2930.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
753241b2ec4a6cb0b19cb3858934a7b065cad8c2265425750331f854483c2930.exe
Resource
win10v2004-20220812-en
General
-
Target
753241b2ec4a6cb0b19cb3858934a7b065cad8c2265425750331f854483c2930
-
Size
43KB
-
MD5
6b74b55461887379eb2d6c4f0e9180e8
-
SHA1
4d61f3253c32153c70bd36f8995180778ef6f1b5
-
SHA256
753241b2ec4a6cb0b19cb3858934a7b065cad8c2265425750331f854483c2930
-
SHA512
95168f5f4e3390a3f6661788e22da961e33203c3807448af050889dda8c3f58f575983300bda8efd94a87ccee8ffe87b89f1ecc208d1d498bc1af0faa266f0bc
-
SSDEEP
768:8iSBgBvw7V1gSW+2rVk4cJ4Tb82NB4VVLhfq3GJ0bVuAI3rvO1I2abFg:8BySIZJvo4n4ndq3GObVc36i2a2
Malware Config
Signatures
Files
-
753241b2ec4a6cb0b19cb3858934a7b065cad8c2265425750331f854483c2930.exe windows x86
26ea26e0912b623481c7efe946ae76b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winsta
WinStationShutdownSystem
WinStationEnumerateW
WinStationFreeMemory
WinStationOpenServerW
WinStationSendMessageW
user32
CharToOemW
LoadStringW
ntdll
_wcslwr
memmove
_wcsnicmp
wcscmp
VerSetConditionMask
wcsncpy
wcstol
vsprintf
wcscat
_ultoa
wcschr
wcscpy
wcstoul
iswctype
_snwprintf
wcslen
msvcrt
vfwprintf
vswprintf
printf
free
_c_exit
_exit
_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
malloc
fprintf
setlocale
_iob
fwprintf
_wcsdup
kernel32
GetLastError
SleepEx
Sleep
FreeLibrary
LoadLibraryW
SetLastError
WriteConsoleW
GetFileType
GetStdHandle
GetModuleHandleA
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetCommandLineW
VerifyVersionInfoW
LocalAlloc
LocalFree
GetOEMCP
GetACP
FormatMessageW
GetModuleHandleW
MultiByteToWideChar
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rgxjtjl Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE