Static task
static1
Behavioral task
behavioral1
Sample
7a6dbc67c875238a6219c71c5a6efe468ce8529f6745312c77b2af9a1fae6c0c.exe
Resource
win7-20220812-en
General
-
Target
7a6dbc67c875238a6219c71c5a6efe468ce8529f6745312c77b2af9a1fae6c0c
-
Size
4.2MB
-
MD5
21ac9ceb3322e89a02f99b035ec212fe
-
SHA1
50d107b1c8a9d257477b7436ee05377533c89351
-
SHA256
7a6dbc67c875238a6219c71c5a6efe468ce8529f6745312c77b2af9a1fae6c0c
-
SHA512
a30d91dc955cde4280701f36b3df396ad8c1a452ce203896e487b1411201d4a80acf716597d77c36e746d88b4fc2de108398409b5dcb367d1188a6cb53549ba6
-
SSDEEP
98304:UzTmT93qEhW0Xa0+UqjdBsrAoPgI3nqrJ3JJTwUgiEJN0Asz7H6OjgFE4hPCj:UzTWZhWvmYBsfgIX6JHRAsfHvUj0
Malware Config
Signatures
Files
-
7a6dbc67c875238a6219c71c5a6efe468ce8529f6745312c77b2af9a1fae6c0c.exe windows x86
fc7f52bf1f4aa7d4a20dd9fbf4293e0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
shell32
SHGetFolderPathW
wtsapi32
WTSSendMessageW
user32
MessageBoxW
Sections
.MPRESS1 Size: 4.0MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE