Static task
static1
Behavioral task
behavioral1
Sample
c74bfc14ae04b70608929473c0624fe39edcdc69ed5c1a82d4f5c5a59d5e4a11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c74bfc14ae04b70608929473c0624fe39edcdc69ed5c1a82d4f5c5a59d5e4a11.exe
Resource
win10v2004-20220812-en
General
-
Target
c74bfc14ae04b70608929473c0624fe39edcdc69ed5c1a82d4f5c5a59d5e4a11
-
Size
26KB
-
MD5
570babaca59f6b931884c01de3ee0eb0
-
SHA1
e6f42d1ced548d12ef6fd914ee858fbe38d594e3
-
SHA256
c74bfc14ae04b70608929473c0624fe39edcdc69ed5c1a82d4f5c5a59d5e4a11
-
SHA512
f10d873ea1c64f72a215180fbbec45d371cc7288b7f2552db70813e8f4706592740d286535033282578a110d74f0212a57e060fbce68337b5ea52fd8f2c6f256
-
SSDEEP
384:waXFVAwFKHGJnBFEBB2EmmAC3HUGE8r+x34kEmGR9J5rpLpnE0IWP+CBswh7ErWQ:waw9w+2CAWHpuod1Jxpnmxwh7G5Of
Malware Config
Signatures
Files
-
c74bfc14ae04b70608929473c0624fe39edcdc69ed5c1a82d4f5c5a59d5e4a11.exe windows x86
c0e62a4e3777f28187563a01116a7a79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
CreateThread
GetStartupInfoW
GetModuleHandleW
LoadLibraryA
GetProcAddress
ExitProcess
WaitForSingleObject
lstrcpyA
ntdll
memset
_wcsnicmp
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
exit
user32
TranslateMessage
GetMessageA
DispatchMessageW
comdlg32
GetOpenFileNameW
advapi32
GetUserNameW
shell32
ShellAboutW
ole32
CoInitialize
comctl32
ord17
powrprof
IsPwrShutdownAllowed
GetPwrCapabilities
clusapi
ClusterEnum
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE