Static task
static1
Behavioral task
behavioral1
Sample
3074b79861260a020e49ea2324da28f1a8ba23498dc27135741c792398d597e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3074b79861260a020e49ea2324da28f1a8ba23498dc27135741c792398d597e2.exe
Resource
win10v2004-20220812-en
General
-
Target
3074b79861260a020e49ea2324da28f1a8ba23498dc27135741c792398d597e2
-
Size
292KB
-
MD5
801c9b435b826fad6ab0717aac9a0eb0
-
SHA1
f6763e644543c97c54c47636785a7b648268f3ab
-
SHA256
3074b79861260a020e49ea2324da28f1a8ba23498dc27135741c792398d597e2
-
SHA512
efe926021345f5906b0bac5a5f6b6747735bce904fe889207f09ac38f5ae4c810c4cf3d4e11ac8f43db8dcd03e6617fad028c931040142e4fd08d32c93424978
-
SSDEEP
6144:NOAL5fNJjhGxUK4pklUdFq6RY2vFDVaOw:NXlJjhG+KQklF6NF4
Malware Config
Signatures
Files
-
3074b79861260a020e49ea2324da28f1a8ba23498dc27135741c792398d597e2.exe windows x86
977f50ad926e1b1cb35e3d6ea7a6f1bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetPrivateProfileIntA
GetTimeFormatW
FormatMessageA
GetModuleHandleA
WaitForSingleObject
GetAtomNameA
CloseHandle
EncodePointer
GetExitCodeProcess
GetOEMCP
LoadLibraryW
VirtualProtectEx
GetNumberFormatW
lstrcpynA
dhcpcsvc
DhcpFreeMem
McastApiCleanup
wtsapi32
WTSEnumerateProcessesA
WTSVirtualChannelRead
WTSVirtualChannelOpen
WTSQueryUserToken
WTSVirtualChannelPurgeInput
WTSSendMessageA
WTSEnumerateServersA
WTSVirtualChannelQuery
WTSQuerySessionInformationA
WTSFreeMemory
WTSSetUserConfigW
WTSVirtualChannelClose
WTSVirtualChannelWrite
user32
PeekMessageW
IsZoomed
LoadMenuW
PostMessageW
CreateDesktopW
InsertMenuA
FlashWindow
IsIconic
CharToOemA
GetDlgItemTextW
LoadBitmapA
IsDialogMessageW
DispatchMessageW
DialogBoxParamA
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ