Static task
static1
Behavioral task
behavioral1
Sample
674c5157d0cbd5773f8a4b7aec06de24af6959982261828c8e95830858f4a8d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
674c5157d0cbd5773f8a4b7aec06de24af6959982261828c8e95830858f4a8d7.exe
Resource
win10v2004-20220812-en
General
-
Target
674c5157d0cbd5773f8a4b7aec06de24af6959982261828c8e95830858f4a8d7
-
Size
114KB
-
MD5
9126e558f82f0e88ec9ec8bfe7fd5ad0
-
SHA1
9c2f90c905db1503da95bad06cdf685746a4227f
-
SHA256
674c5157d0cbd5773f8a4b7aec06de24af6959982261828c8e95830858f4a8d7
-
SHA512
217174e07c8e47c5a737c68954c0764e7e7105cf186c4c50bef8345d83ab72e7f82db933fa9ab41340959b49abd864b79b69df9705e4c8d1bac929a9b57238f1
-
SSDEEP
3072:A7HI1EhwtqRbL2ws+krtztcH15KOPuqmVFk4:A7HI1E2ybi9r8XKBqsFk4
Malware Config
Signatures
Files
-
674c5157d0cbd5773f8a4b7aec06de24af6959982261828c8e95830858f4a8d7.exe windows x86
13e805eaf04b241dc6563d480404e1a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
LoadLibraryExW
lstrlenA
CreateFileW
GetCurrentThreadId
FindResourceW
PulseEvent
HeapCreate
GlobalUnlock
GetCurrentDirectoryA
LocalFree
SetLastError
Sleep
FindClose
GetModuleHandleA
CreateProcessA
GetCommandLineA
lstrcpyA
UnmapViewOfFile
GetComputerNameA
user32
FillRect
GetDlgItem
DispatchMessageA
CheckRadioButton
CallWindowProcA
CreateWindowExA
CreateIcon
DrawEdge
GetCaretPos
IsWindow
DrawMenuBar
GetDC
SetFocus
rsaenh
CPDeriveKey
CPGenKey
CPSignHash
CPDecrypt
CPHashData
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hypnxse Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE