Static task
static1
Behavioral task
behavioral1
Sample
791cfbcf8ca56fb16f33fe6215169735463b5206ee07fedc80236190773e69a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
791cfbcf8ca56fb16f33fe6215169735463b5206ee07fedc80236190773e69a3.exe
Resource
win10v2004-20220812-en
General
-
Target
791cfbcf8ca56fb16f33fe6215169735463b5206ee07fedc80236190773e69a3
-
Size
810KB
-
MD5
463c4cc260f0fa582164da99cac33c60
-
SHA1
751f035f21d8153a1b06027770899cbb56f6a26c
-
SHA256
791cfbcf8ca56fb16f33fe6215169735463b5206ee07fedc80236190773e69a3
-
SHA512
3531aa26a4723e088605517e8322c38a758063390aaa41621542c50dfef8178bcfdfc6d3002560a36eb28b2d4c8a0e5834b1cfaa7156039ce8616dfb68c5e540
-
SSDEEP
12288:RKVKVc0u4YfGZp48Atug5GaO3QMe8f+emqemMn3tS5AWW2Z30OEbZv59xFh:wqMGb48AtFMVQ62Nd+knDxz
Malware Config
Signatures
Files
-
791cfbcf8ca56fb16f33fe6215169735463b5206ee07fedc80236190773e69a3.exe windows x86
b73f9dd511c94fa94b2afe3e76be993c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
CreateFontIndirectA
ChoosePixelFormat
CloseMetaFile
DeleteDC
EndPage
SetViewportExtEx
kernel32
CreateMutexW
Module32NextW
OpenFileMappingA
GetCommandLineW
VirtualAlloc
Module32FirstW
HeapLock
OpenConsoleW
tapi32
lineInitializeExW
lineGetIDA
lineGetCountryW
lineGetAppPriorityW
lineGetID
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 265KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 212KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 290KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ