Static task
static1
Behavioral task
behavioral1
Sample
415cf2333734857def103f8f15de3091bd115454b787c118aabd763b6d3d125e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
415cf2333734857def103f8f15de3091bd115454b787c118aabd763b6d3d125e.exe
Resource
win10v2004-20220812-en
General
-
Target
415cf2333734857def103f8f15de3091bd115454b787c118aabd763b6d3d125e
-
Size
32KB
-
MD5
325fffeb14c48b7bc8a680b640307682
-
SHA1
a86d2020661fc3c98fa43a9578aad227311453cb
-
SHA256
415cf2333734857def103f8f15de3091bd115454b787c118aabd763b6d3d125e
-
SHA512
b91b9f38fb2a2e79a5252a22710d83742f39595b1666c80fc29624452756ad4e2856cb805cbbad58cda28ad38261d4de64ba1da67728ccfd762405feece82737
-
SSDEEP
768:c6R9xrFXHDnwZUszq0hRX6cmO1Sg5sX3M0sXn:c67xr5HDwZUARXV/SHM0c
Malware Config
Signatures
Files
-
415cf2333734857def103f8f15de3091bd115454b787c118aabd763b6d3d125e.exe windows x86
a1461efa6059dc6e158f18504743c166
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
PostMessageA
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
RegisterClassExA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
DispatchMessageA
kernel32
DeviceIoControl
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateFileA
ReadFile
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
CreateDirectoryA
TlsGetValue
GetProcessHeap
IsValidCodePage
SetEnvironmentVariableA
wtsapi32
WTSEnumerateProcessesA
WTSEnumerateServersA
WTSLogoffSession
WTSQuerySessionInformationA
WTSSetSessionInformationA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ