?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
25a3b0650457b2cc987d82371f23d8cd69efbc902f758ece2dab7e3b97b21419.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25a3b0650457b2cc987d82371f23d8cd69efbc902f758ece2dab7e3b97b21419.exe
Resource
win10v2004-20220812-en
General
-
Target
25a3b0650457b2cc987d82371f23d8cd69efbc902f758ece2dab7e3b97b21419
-
Size
171KB
-
MD5
10887085a2af96b4669d4cec69a7eff0
-
SHA1
5c9e5efb4c1813bdfa00bd3d77cfde9c45ab6ffa
-
SHA256
25a3b0650457b2cc987d82371f23d8cd69efbc902f758ece2dab7e3b97b21419
-
SHA512
70911e734793983c569a009072873bd98590e5c4d68abe1e7e16031d441c9aa255dc0b46d1ae65ba9366ac7d45e8fe4946fbb44a86a1366ef0ce95d02301d408
-
SSDEEP
3072:lx6JlN8WD4hvE71umAd9e4ho2NBtKoXYIu5wFY/sq0lC7kBWD7dc:qJlNP7EP7POKYIu5wFYiw7ky6
Malware Config
Signatures
Files
-
25a3b0650457b2cc987d82371f23d8cd69efbc902f758ece2dab7e3b97b21419.exe windows x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ