Static task
static1
Behavioral task
behavioral1
Sample
632f1dbc1100566c72353102c8c26380efa0f93ab3494acbca9bf4fdf802c81e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
632f1dbc1100566c72353102c8c26380efa0f93ab3494acbca9bf4fdf802c81e.exe
Resource
win10v2004-20220812-en
General
-
Target
632f1dbc1100566c72353102c8c26380efa0f93ab3494acbca9bf4fdf802c81e
-
Size
34KB
-
MD5
78bcd32ebb597391014c6029c7fedfd3
-
SHA1
95879e15151e65edfcef00ca252a89202ea41316
-
SHA256
632f1dbc1100566c72353102c8c26380efa0f93ab3494acbca9bf4fdf802c81e
-
SHA512
35294fb0dd3ac25b53abff58186f8e3dc57f6eae88c06d6f584d5391908e6ed4a777a0c6f74429586157b43989b304e26d71c9d13afd652ae309efc8ee76f898
-
SSDEEP
96:xfbrkHZQFULoJBBj+czk8cS/N0hpO7mPm2dfnYr4VM9jh0tvcFD65KHe5C8ChD1J:lPcKFNQOkryZawOM9F0tkFDPHYCi
Malware Config
Signatures
Files
-
632f1dbc1100566c72353102c8c26380efa0f93ab3494acbca9bf4fdf802c81e.exe windows x86
f7f934911fdaefe09119c1f04e74f497
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetStartupInfoA
LoadLibraryA
GetProcessHeap
GetModuleHandleA
VirtualAlloc
advapi32
RegOpenKeyA
RegCloseKey
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oti1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oti5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oti2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oti3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oti4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oti6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 366B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ