Static task
static1
Behavioral task
behavioral1
Sample
18e1447b0a78026d2a1487a25137d7b727b9ca4cc8dccccb7d39c78babd16d5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18e1447b0a78026d2a1487a25137d7b727b9ca4cc8dccccb7d39c78babd16d5d.exe
Resource
win10v2004-20220812-en
General
-
Target
18e1447b0a78026d2a1487a25137d7b727b9ca4cc8dccccb7d39c78babd16d5d
-
Size
443KB
-
MD5
0ab40af50c7aec14e846b3e52a882970
-
SHA1
d62dcbfdbefc9071d1a3e3340a8bad1a6d2b8620
-
SHA256
18e1447b0a78026d2a1487a25137d7b727b9ca4cc8dccccb7d39c78babd16d5d
-
SHA512
52c7a4e6ec45951580e5e1f3a34e6e7adc4b73d260bb138bf0cf3feaf22bddfc636eb37c3c0336f8cc8ff45f3761818aa7e10a9411ab89c4a6216649eca77f50
-
SSDEEP
6144:3hzhRhXIlgnydcGHvHIlbCPFwAtCYBHY9kmbgC4ZZ8y31tso5UuWoNRXzZUkqY:3hzhRhXqc1lbI1t1YOnCylb5p3X9UkqY
Malware Config
Signatures
Files
-
18e1447b0a78026d2a1487a25137d7b727b9ca4cc8dccccb7d39c78babd16d5d.exe windows x86
c7e927a5672d5c9f98cba38f29cef488
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetSecurityDescriptorOwner
kernel32
FreeConsole
ntdll
ZwWaitLowEventPair
NtQueryInformationProcess
user32
GetProcessWindowStation
GetDialogBaseUnits
GetDesktopWindow
Sections
.text Size: 436KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE