Static task
static1
Behavioral task
behavioral1
Sample
a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922.exe
Resource
win10v2004-20220812-en
General
-
Target
a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922
-
Size
38KB
-
MD5
90eaf3faf3295ef6684fd2ece3ba7e60
-
SHA1
105b7d09072af63e5b3bbc328df4c2f9d7a4babc
-
SHA256
a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922
-
SHA512
37ee4f5e9bc0d169358b92926a3432460d7f0ff4c380da33f11a159d0c3a247b3f12fe58533f4126ab011934775845076d6f133a84ef09a7411da8e97045d973
-
SSDEEP
768:czyLcNnrfYOjFgZn6HXx8mmj1qEQoSSdrXv2/YD0ZRJ:czyINscFKMx8mmj1LQoSsrXOQD
Malware Config
Signatures
Files
-
a659649dc7598d9f91dd693d060f084359b16225b8b9962864e2d2fe10c89922.exe windows x86
9f327f71e730da1fbc49a3b953a0ea0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
PostMessageA
BeginPaint
SendMessageA
GetClientRect
EndPaint
PostQuitMessage
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
SetFocus
DispatchMessageA
kernel32
ExitProcess
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetProcessHeap
lstrcpynA
LoadLibraryA
CreateDirectoryA
WriteProcessMemory
GetModuleHandleA
comctl32
ord17
wtsapi32
WTSEnumerateProcessesA
WTSLogoffSession
WTSQuerySessionInformationA
WTSWaitSystemEvent
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ