Static task
static1
Behavioral task
behavioral1
Sample
c56879fd64c38fd06d9638fdd984c649d4001f85703078c0e0dc62b3dd937085.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c56879fd64c38fd06d9638fdd984c649d4001f85703078c0e0dc62b3dd937085.exe
Resource
win10v2004-20220901-en
General
-
Target
c56879fd64c38fd06d9638fdd984c649d4001f85703078c0e0dc62b3dd937085
-
Size
446KB
-
MD5
7b26bdd867ce9cd2ee7602e96cdcb510
-
SHA1
6ed516e28001f2130428a6c76a48531e100d121d
-
SHA256
c56879fd64c38fd06d9638fdd984c649d4001f85703078c0e0dc62b3dd937085
-
SHA512
84b79e471b3bcd1916c21d6ad67f7d99b2ff0542b4bfd9ef6f7aa0e792f9254be94faa76f04751d08d54a4e0a10cea194dcd1192849fe4e4398f5be164c45020
-
SSDEEP
6144:nEf0m1MFJ96tj6sgQ2JPgpikOJGBppewdTgSROPPhuy7Pc/VCO/ByJgzL8hkUG:eMFJccsEJL2KQ0PcNDByJKt
Malware Config
Signatures
Files
-
c56879fd64c38fd06d9638fdd984c649d4001f85703078c0e0dc62b3dd937085.exe windows x86
88bd116ee6563a11e0c3e47dcd6772cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAnsiStringToUnicodeSize
NtReplyWaitReceivePortEx
oleaut32
VarWeekdayName
kernel32
FindFirstFileExA
user32
GetActiveWindow
GetClipboardSequenceNumber
GetMessagePos
Sections
.text Size: 439KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE