Static task
static1
Behavioral task
behavioral1
Sample
74749e70f0096773ea69254556a8c56fe2c34b009b3e0f7ad73b5f4febf3c339.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74749e70f0096773ea69254556a8c56fe2c34b009b3e0f7ad73b5f4febf3c339.exe
Resource
win10v2004-20220812-en
General
-
Target
74749e70f0096773ea69254556a8c56fe2c34b009b3e0f7ad73b5f4febf3c339
-
Size
31KB
-
MD5
47241e7ca45ef9d32b86b1ddbd1cc42b
-
SHA1
d11416d70157b4d2ae3b0abf41a3014687ccdfb8
-
SHA256
74749e70f0096773ea69254556a8c56fe2c34b009b3e0f7ad73b5f4febf3c339
-
SHA512
51e5bb941725f4ecb644683d3e7ed73d01d50b337cdc355974d068a1067ef88f06124949a3c2b0fe3c5006b0c12bc79dc6a0426b7fac73e83b559203b3de2800
-
SSDEEP
768:yW+cd4cMrouTR2X1gp9cyT1OKyMX77ZI:X/2M71gpOyxOKyMX77Z
Malware Config
Signatures
Files
-
74749e70f0096773ea69254556a8c56fe2c34b009b3e0f7ad73b5f4febf3c339.exe windows x86
0d1fe1f00689f8c8a204c7e750ff2801
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
RtlZeroMemory
CreateThread
lstrcpyA
WaitForSingleObject
ExitProcess
ntdll
_wcsnicmp
user32
GetActiveWindow
DispatchMessageW
GetMessageA
TranslateMessage
MessageBoxW
comdlg32
GetOpenFileNameW
shell32
ShellAboutW
powrprof
IsPwrShutdownAllowed
GetPwrCapabilities
GetActivePwrScheme
clusapi
ClusterEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE