Static task
static1
Behavioral task
behavioral1
Sample
e93654f0c7611ec784903190f0a73223f34b68c18c48f5f3b8cf4d3c75710b8e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e93654f0c7611ec784903190f0a73223f34b68c18c48f5f3b8cf4d3c75710b8e.exe
Resource
win10v2004-20220812-en
General
-
Target
e93654f0c7611ec784903190f0a73223f34b68c18c48f5f3b8cf4d3c75710b8e
-
Size
98KB
-
MD5
a02850e3279b8399ebf1d6f462efb0e0
-
SHA1
f37c1f04fa7a3adda1554313870839ba3e0e1481
-
SHA256
e93654f0c7611ec784903190f0a73223f34b68c18c48f5f3b8cf4d3c75710b8e
-
SHA512
44fe6d2b329a6244e1be9f0dbbf33f2266a6d24633d9532e22a0bf2b403072e0d6114805af93142c26d920341238cf08639803011c11fde2215094a31b8c76ee
-
SSDEEP
1536:0k87AI5hKCU0GDlKz/apxQOJPSb77g8RK4IEAY8+9GM17stBoqYj4C8AU0:0rLKCU1KMjC779RK4I9DW0BH8
Malware Config
Signatures
Files
-
e93654f0c7611ec784903190f0a73223f34b68c18c48f5f3b8cf4d3c75710b8e.exe windows x86
54c1ac2aa1bbf2fc1a73760c53cdde7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionA
GetModuleHandleA
IsBadStringPtrA
GetEnvironmentVariableA
lstrcmpA
GetModuleFileNameA
FindResourceA
GetCurrentDirectoryA
CreatePipe
FoldStringA
CreateSemaphoreA
VirtualQueryEx
EncodePointer
InterlockedDecrement
DisconnectNamedPipe
FileTimeToLocalFileTime
QueryDosDeviceA
OpenMutexA
HeapCreate
GetLogicalDrives
SetFileAttributesA
FormatMessageA
GetBinaryTypeA
FileTimeToSystemTime
GetProcessVersion
GetComputerNameA
GetAtomNameA
GetProcAddress
wtsapi32
WTSSendMessageA
WTSUnRegisterSessionNotification
WTSSetUserConfigA
WTSOpenServerA
WTSEnumerateSessionsA
WTSVirtualChannelOpen
WTSCloseServer
WTSQueryUserToken
WTSVirtualChannelClose
WTSVirtualChannelRead
WTSRegisterSessionNotification
WTSQuerySessionInformationA
WTSSetSessionInformationA
ntshrui
IsFolderPrivateForUser
GetNetResourceFromLocalPathA
clbcatq
SetSetupSave
DllGetClassObject
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.udata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE