Static task
static1
Behavioral task
behavioral1
Sample
096ad49326588c3a7134e543f61d3641e5ffe37cd3a176e9cde3d5630bf2b7ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
096ad49326588c3a7134e543f61d3641e5ffe37cd3a176e9cde3d5630bf2b7ab.exe
Resource
win10v2004-20220901-en
General
-
Target
096ad49326588c3a7134e543f61d3641e5ffe37cd3a176e9cde3d5630bf2b7ab
-
Size
75KB
-
MD5
a24d06ea941276a73606dde8ed77861f
-
SHA1
c7064ea605405acd2c50f2a8aafaa6138d188734
-
SHA256
096ad49326588c3a7134e543f61d3641e5ffe37cd3a176e9cde3d5630bf2b7ab
-
SHA512
3b5eb217e696366779f2ce71c6d4b7bf07eaaf77d831b888f1345a7b90e27ef2a88f02380a34f8654715dc2b28e81df056ff4e0c60fe97dd224ef2cf4b862a8e
-
SSDEEP
1536:XrMc7tAqz14R+tWdQ7UXyhDnKEascHJpqxAY6k:Btx5EaWdQ73hLYvJwv
Malware Config
Signatures
Files
-
096ad49326588c3a7134e543f61d3641e5ffe37cd3a176e9cde3d5630bf2b7ab.exe windows x86
421485da8a1d0f66c5ca03dfd0dc2ff2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
advapi32
RegQueryValueExA
ole32
CoInitialize
shell32
ShellExecuteA
oleaut32
SysFreeString
shlwapi
PathGetArgsA
ws2_32
closesocket
netapi32
Netbios
Sections
.text Size: 70KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE