Static task
static1
Behavioral task
behavioral1
Sample
c06d28888677f3f805938ef3dbd3c3bd7b57b8cfc0fef920c3690b999ccc6cdc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c06d28888677f3f805938ef3dbd3c3bd7b57b8cfc0fef920c3690b999ccc6cdc.exe
Resource
win10v2004-20220812-en
General
-
Target
c06d28888677f3f805938ef3dbd3c3bd7b57b8cfc0fef920c3690b999ccc6cdc
-
Size
643KB
-
MD5
0ce41c542e89772f663c9d65819b0d60
-
SHA1
d49f2cf27127e9706103d5ff6e743a8317c6a9cd
-
SHA256
c06d28888677f3f805938ef3dbd3c3bd7b57b8cfc0fef920c3690b999ccc6cdc
-
SHA512
e2cb82d98933d1c1d20ffe0eb9a16270174a7800adc19fdd00c6e128b7d034a635a44c1265cf490990394a3a1d9eabf33adff33e2ecb3fc835be66c8dc5d8639
-
SSDEEP
12288:OHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:ODgINfAuBcgcZG2uG24MG4Y
Malware Config
Signatures
Files
-
c06d28888677f3f805938ef3dbd3c3bd7b57b8cfc0fef920c3690b999ccc6cdc.exe windows x86
b36eb9a4c6fca2002f3fab21d6da4be8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
iphlpapi
GetAdaptersInfo
ws2_32
htonl
wtsapi32
WTSRegisterSessionNotification
Sections
.MPRESS1 Size: 438KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE