Static task
static1
Behavioral task
behavioral1
Sample
b465132f456f81785744f8e7c80e80d91d93c903fdfd9a2459910dac70a6bb50.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b465132f456f81785744f8e7c80e80d91d93c903fdfd9a2459910dac70a6bb50.exe
Resource
win10v2004-20220901-en
General
-
Target
b465132f456f81785744f8e7c80e80d91d93c903fdfd9a2459910dac70a6bb50
-
Size
725KB
-
MD5
a04709c78c2944c5f7a3706667668d10
-
SHA1
8851aa4fc32127e39b2da36863ed6e76c5b689f9
-
SHA256
b465132f456f81785744f8e7c80e80d91d93c903fdfd9a2459910dac70a6bb50
-
SHA512
e0377106268539053f3c7c0a0a79ae23a6c552109aca85992b82a8949bc8a657b949364362f7c78eb9111c484a8819aaa96df7b438e07a1b6bc625a90bc71b7b
-
SSDEEP
12288:8NJlKH0Z08kCF9JnhAznaNIR80urKVtfL56mbItsE97wpoXDnc+i7swMEhe+:81KHn8DF94RErCtRbItvzcBMEhZ
Malware Config
Signatures
Files
-
b465132f456f81785744f8e7c80e80d91d93c903fdfd9a2459910dac70a6bb50.exe windows x86
2512732e9dc7e477eae56864dc969767
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LsaClearAuditLog
GetTraceLoggerHandle
CryptGetDefaultProviderA
ole32
OleLoadFromStream
ntdll
ZwSetSecurityObject
ZwSetIoCompletion
kernel32
GetSystemDefaultLangID
user32
GetFocus
Sections
.text Size: 717KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE