Static task
static1
Behavioral task
behavioral1
Sample
903caceb3a12a42c034b4afd0d658f3a9320eaa0ceb8d3de30034f86d5fba2e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
903caceb3a12a42c034b4afd0d658f3a9320eaa0ceb8d3de30034f86d5fba2e6.exe
Resource
win10v2004-20220812-en
General
-
Target
903caceb3a12a42c034b4afd0d658f3a9320eaa0ceb8d3de30034f86d5fba2e6
-
Size
172KB
-
MD5
371a0fdbfdd95c79503d7550a014c600
-
SHA1
467386415a719396ee53c7ff2586c488b907d9ac
-
SHA256
903caceb3a12a42c034b4afd0d658f3a9320eaa0ceb8d3de30034f86d5fba2e6
-
SHA512
a3ddb6bc5aec063133c158a16ae3f0c3ed79f4ad1fa0b8a34b6c91fc656be55a6b29de05032ba2c0c116cd5d8f5e4347aa697f0b22ce939a88a55cc6b942b149
-
SSDEEP
3072:mzG87EOntSrYCNzChMKa6aDAT7eNPTaFGA/4JpNyV9ad+XHsfJONfaUNuXngArIY:wz7EOntSDzZ6akvGP2FyNS9QYsfJO1NE
Malware Config
Signatures
Files
-
903caceb3a12a42c034b4afd0d658f3a9320eaa0ceb8d3de30034f86d5fba2e6.exe windows x86
7476c833185b585353fa12c3904cda57
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
GetMessageA
GetDlgItem
GetDlgItemTextA
CharLowerBuffA
MsgWaitForMultipleObjects
GetIconInfo
GetKeyboardState
PeekMessageA
SetThreadDesktop
OpenWindowStationA
CloseDesktop
EndDialog
GetClassNameA
CloseWindowStation
FindWindowExA
SetProcessWindowStation
ToUnicode
OpenDesktopA
GetForegroundWindow
advapi32
CryptHashData
CryptGetHashParam
RegQueryValueExA
CryptReleaseContext
RegSetValueExA
CryptAcquireContextW
RegEnumKeyExA
DuplicateTokenEx
RegCreateKeyExA
CryptCreateHash
GetUserNameW
kernel32
VirtualAlloc
CreateThread
VirtualProtect
GetModuleHandleA
WideCharToMultiByte
LeaveCriticalSection
FindNextFileW
lstrcatA
GetModuleFileNameW
lstrcatW
GetLocalTime
CreateEventW
GetTickCount
GetModuleFileNameA
lstrcmpiA
SystemTimeToFileTime
shlwapi
wvnsprintfW
wnsprintfW
PathRemoveFileSpecW
wvnsprintfA
StrCmpNIW
PathCombineW
PathFindFileNameW
StrStrW
PathFileExistsW
StrCmpNIA
SHDeleteKeyA
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE