Static task
static1
Behavioral task
behavioral1
Sample
1a5fcb209b5af4c620453a70653263109716f277150f0d389810df85ec0beac1.7z
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1a5fcb209b5af4c620453a70653263109716f277150f0d389810df85ec0beac1.7z
Resource
win10v2004-20220812-en
General
-
Target
1a5fcb209b5af4c620453a70653263109716f277150f0d389810df85ec0beac1.7z
-
Size
771KB
-
MD5
13d8ee518de59287acb42ea9e68c7a9e
-
SHA1
9aa6c3f98aa30b24b9715e7bef075b4509c983dd
-
SHA256
25ecd56d362c5a1f2bed00c051a67131a580435c6b2e30d4484f7ea331cac28d
-
SHA512
492c409d46f9b232eab67844a18d73122bfbe8e14565cb766104b7acdb496cdaeb38b7a75af3a3c8200e3fcc0471cef831a4c9bd0d6860f17a7db9ec2cca5515
-
SSDEEP
24576:SSWsY2ifQoBpnwZ7SyohmcbEO8O5sQN3ZsJf:0h4opwZN/OTsN
Malware Config
Signatures
Files
-
1a5fcb209b5af4c620453a70653263109716f277150f0d389810df85ec0beac1.7z.7z
Password: infected
-
1a5fcb209b5af4c620453a70653263109716f277150f0d389810df85ec0beac1.dll windows x86
Password: infected
9829d5b3b03a15904a67fbe73b988ddd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowRect
crypt32
CertCreateSelfSignCertificate
kernel32
GetModuleFileNameW
GetBinaryTypeW
GetModuleHandleW
GetCurrentDirectoryW
GetModuleHandleA
GetCalendarInfoW
msvcrt
wcslen
setupapi
CM_Locate_DevNodeW
opengl32
wglGetProcAddress
wintrust
CryptCATCDFClose
oleaut32
VariantCopyInd
VarI4FromCy
GetActiveObject
LoadTypeLi
advapi32
RegOpenKeyA
winspool.drv
ClosePrinter
imm32
ImmRegisterWordW
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 740KB - Virtual size: 739KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ