Static task
static1
Behavioral task
behavioral1
Sample
a6460e20130232218228ab4828278c92a53544e9cb02ff06bba6bace8962b946.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6460e20130232218228ab4828278c92a53544e9cb02ff06bba6bace8962b946.exe
Resource
win10v2004-20220901-en
General
-
Target
a6460e20130232218228ab4828278c92a53544e9cb02ff06bba6bace8962b946
-
Size
364KB
-
MD5
77e1ddcd3ff7923fce595eb6ccc394d0
-
SHA1
53d14ba311ae48fdb99ac5f846e81e2ef413cc02
-
SHA256
a6460e20130232218228ab4828278c92a53544e9cb02ff06bba6bace8962b946
-
SHA512
1bb2e05ab2a7df4dcafe47dc0665f4ed52b7c61e948ff8c28e75ab331d32dad45fdee6403ad89b7ccb003473efbe3064906a3d3579c2ac7ee15db83cb02024da
-
SSDEEP
6144:7AIeSGf0/WCKDbbmKOZoryfksLIjzNqsUliM/zSm+XQAGBv:sIeJqKLjOZot0IXZUl7Sm+AHx
Malware Config
Signatures
Files
-
a6460e20130232218228ab4828278c92a53544e9cb02ff06bba6bace8962b946.exe windows x86
109365889f0156a7c06164e8933b66a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42u
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5285
ord5710
ord4616
ord3733
ord561
ord815
ord2717
ord2715
ord2382
ord3054
ord5094
ord5097
ord4461
ord4298
ord4480
ord5006
ord975
ord5468
ord3398
ord2874
ord2873
ord4146
ord4072
ord5233
ord5278
ord2641
ord1658
ord4430
ord5248
ord4421
ord3618
ord366
ord674
ord2099
ord2084
ord5480
ord5208
ord5446
ord6390
ord5436
ord6379
ord6371
ord2836
ord2859
ord4269
ord617
ord296
ord3658
ord5214
ord2634
ord6211
ord1569
ord4704
ord5679
ord4272
ord6195
ord2294
ord324
ord641
ord3592
ord4419
ord5276
ord1767
ord6048
ord2506
ord4992
ord4847
ord5261
ord602
ord3562
ord1143
ord656
ord3605
ord2078
ord2371
ord4229
ord861
ord556
ord2114
ord6375
ord6193
ord540
ord535
ord538
ord4124
ord922
ord858
ord795
ord567
ord3716
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord3397
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord6051
ord2854
ord4270
ord2855
ord800
ord1165
ord823
ord3345
ord825
atl
ord17
ord23
ord22
ord18
ord21
ord16
ord30
ord32
user32
GetDesktopWindow
PostMessageW
LoadIconW
SetForegroundWindow
KillTimer
SetTimer
ReleaseDC
GetDC
GetClientRect
SendMessageW
EnableWindow
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AJS Size: 2KB - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fh55 Size: 2KB - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fh53 Size: 2KB - Virtual size: 230B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fh54 Size: 2KB - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fh56 Size: 2KB - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fh57 Size: 2KB - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fh58 Size: 2KB - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.SbkS Size: 2KB - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HAJS Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6hJS Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AHQJ Size: 2KB - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ