Static task
static1
Behavioral task
behavioral1
Sample
94b675de10d5cdcf7770db11a5d69febc3c5b5325019d647da621ffe7ccff0b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94b675de10d5cdcf7770db11a5d69febc3c5b5325019d647da621ffe7ccff0b7.exe
Resource
win10v2004-20220812-en
General
-
Target
94b675de10d5cdcf7770db11a5d69febc3c5b5325019d647da621ffe7ccff0b7
-
Size
92KB
-
MD5
45447c535a253720b2a134f7adcb7970
-
SHA1
99577fdfcc204a4553b28967da7b72d4c5553450
-
SHA256
94b675de10d5cdcf7770db11a5d69febc3c5b5325019d647da621ffe7ccff0b7
-
SHA512
1eaae38506e2764a9b3b082ed14e39d2c4608d95e7ca8e18713ce1d4c27e988698ca61606dc50bec4b6481a2e380d061dc3a04ce687a3cb868b53a6a3efbb91f
-
SSDEEP
1536:JlnZi4e1GVoZyoqVPnsK2bupuhntZB9NWhZhdCt0M70Yk:Jln831GVobqhnIAuhtdgbrCeM70Yk
Malware Config
Signatures
Files
-
94b675de10d5cdcf7770db11a5d69febc3c5b5325019d647da621ffe7ccff0b7.exe windows x86
18620e27f98ccad2d931f0827c9d9d8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
lstrcmpiA
ExitProcess
TerminateProcess
GetCommandLineA
GetProcAddress
lstrcmpA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
HeapAlloc
WriteFile
RtlUnwind
GetCPInfo
VirtualFree
HeapCreate
HeapFree
GetFileType
GetStdHandle
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
UnhandledExceptionFilter
SetHandleCount
FreeEnvironmentStringsW
GetCurrentProcess
FreeEnvironmentStringsA
GetModuleFileNameA
WideCharToMultiByte
user32
GetMessageA
TranslateMessage
GetClassNameA
GetCursorPos
WindowFromPoint
GetParent
GetWindowLongA
PostMessageA
SendMessageA
GetWindow
GetWindowRect
KillTimer
SetTimer
DefWindowProcA
LoadCursorA
PostQuitMessage
LoadIconA
ShowWindow
RegisterClassA
CreateWindowExA
DispatchMessageA
mxkeybd
MXK_Exit
MXK_Initialize
MXK_SetHookScanCode
winmm
mixerClose
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE