Static task
static1
Behavioral task
behavioral1
Sample
72d95af27f71cf0bba5ae6f0316513aa0f69e318ad9fd2d32db91493264d465c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
72d95af27f71cf0bba5ae6f0316513aa0f69e318ad9fd2d32db91493264d465c.exe
Resource
win10v2004-20220812-en
General
-
Target
72d95af27f71cf0bba5ae6f0316513aa0f69e318ad9fd2d32db91493264d465c
-
Size
244KB
-
MD5
60e11218b45a3e8997211b1bab6fe994
-
SHA1
b70c5180098e5bf3101d9278bce1075132d610de
-
SHA256
72d95af27f71cf0bba5ae6f0316513aa0f69e318ad9fd2d32db91493264d465c
-
SHA512
71283f0512b08a57e245ca6dcf10e008c562e3ebfc6dd87f317ec3a59c8916edde14291ae2d1115165c8a753e9efe49c0755085ed0ea444c935fe18588b2b378
-
SSDEEP
3072:QQ6P1oE4cj1MI5GaDUAXBLauYk0wCbr8FtQTv26w2FU:pgD4m1MIbUAxLau0wCIHQ7Q2F
Malware Config
Signatures
Files
-
72d95af27f71cf0bba5ae6f0316513aa0f69e318ad9fd2d32db91493264d465c.exe windows x86
521616e42d11145c75b4d87d0e6db2ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wtsapi32
WTSSetUserConfigW
WTSQueryUserToken
WTSEnumerateServersA
WTSVirtualChannelPurgeInput
WTSEnumerateSessionsW
WTSRegisterSessionNotification
WTSSendMessageA
WTSFreeMemory
WTSVirtualChannelOpen
WTSWaitSystemEvent
WTSLogoffSession
WTSVirtualChannelRead
WTSQuerySessionInformationA
WTSOpenServerW
user32
GetClassLongA
FlashWindow
GetDlgItemTextW
LoadMenuW
wsprintfA
DrawStateA
IsZoomed
IsZoomed
PostMessageW
GetPropW
LoadCursorW
LoadIconA
clbcatq
SetSetupSave
SetSetupOpen
kernel32
LoadLibraryW
ReadConsoleA
CloseHandle
FormatMessageA
GetDateFormatW
GetOEMCP
GetCurrentProcess
VirtualProtectEx
GetModuleHandleA
WaitForSingleObject
MapViewOfFile
CreateNamedPipeA
HeapSize
Sections
.text Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ