Static task
static1
Behavioral task
behavioral1
Sample
93a4f68d4a575e801bca7b17c7cfb0225679797aa0240817d8ca61761379d69d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93a4f68d4a575e801bca7b17c7cfb0225679797aa0240817d8ca61761379d69d.exe
Resource
win10v2004-20220901-en
General
-
Target
93a4f68d4a575e801bca7b17c7cfb0225679797aa0240817d8ca61761379d69d
-
Size
288KB
-
MD5
e2b99ea63056faf4f968a741019ecf3b
-
SHA1
6dd35521b25d897f5c3c5605c44debf8b855e1e3
-
SHA256
93a4f68d4a575e801bca7b17c7cfb0225679797aa0240817d8ca61761379d69d
-
SHA512
f52b2bd9bf260dd03324c6754d88ef4952d71de328931934116405a8f58267f4ae2655b17bf7258e911f61c87279c046d8fb8621fde067a770be86e54ceed1e6
-
SSDEEP
6144:BsfXtEJzzvnWaauL1RW92Rw9yYTjOMwtJ:BsfdEJzjWaaPk2s0j9wf
Malware Config
Signatures
Files
-
93a4f68d4a575e801bca7b17c7cfb0225679797aa0240817d8ca61761379d69d.exe windows x86
289cceeb814f38a7bbfe70d26353f579
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCalendarInfoW
GlobalFindAtomA
GlobalFindAtomW
GetCalendarInfoW
ole32
CoSetProxyBlanket
OleConvertIStorageToOLESTREAMEx
SNB_UserUnmarshal
STGMEDIUM_UserSize
CoWaitForMultipleHandles
StgCreateDocfileOnILockBytes
CLIPFORMAT_UserUnmarshal
RegisterDragDrop
STGMEDIUM_UserUnmarshal
CoImpersonateClient
CoQueryAuthenticationServices
StgGetIFillLockBytesOnFile
HGLOBAL_UserUnmarshal
CoFileTimeNow
StringFromGUID2
OleLoad
PropStgNameToFmtId
OleCreateFromFileEx
OleConvertOLESTREAMToIStorageEx
CoSwitchCallContext
OleUninitialize
OleBuildVersion
CoQueryProxyBlanket
CoBuildVersion
OleCreateLinkEx
CoFreeUnusedLibraries
HDC_UserUnmarshal
OleRegGetMiscStatus
CoCreateGuid
CoIsOle1Class
RevokeDragDrop
shlwapi
StrTrimA
oleaut32
VarI4FromI2
VarR8FromUI2
VarI1FromR8
VarIdiv
VarR4FromDate
VarI1FromUI2
SafeArrayLock
VarBstrFromUI2
VarI2FromUI2
VectorFromBstr
VarCyFromDate
VarI1FromUI1
VarDecFromUI2
imm32
ImmGetGuideLineW
ImmAssociateContext
ImmUnregisterWordA
ImmGetImeMenuItemsA
ImmGetCandidateListA
ImmEnumRegisterWordA
ImmGetCandidateListCountA
ImmConfigureIMEW
ImmIsUIMessageA
ImmGetConversionListA
ImmSetOpenStatus
ImmGetIMEFileNameW
ImmGetVirtualKey
ImmSetStatusWindowPos
ImmConfigureIMEA
ImmGetCandidateListW
ImmGetConversionListW
ImmDestroyContext
ImmGetStatusWindowPos
ImmIsUIMessageW
ImmSetConversionStatus
ImmSetCompositionStringA
esent
JetReadFile
JetGetVersion
JetCloseTable
JetDeleteIndex
JetRestore2
JetDefragment
JetCommitTransaction
JetEndSession
JetOpenFile
JetCompact
JetExternalRestore
JetDeleteColumn
JetGetLock
JetStopBackup
JetTerm
JetOpenDatabase
JetBeginTransaction
JetRollback
JetMove
JetTruncateLog
JetOpenTable
JetGrowDatabase
JetCloseFile
JetGetDatabaseFileInfo
JetRetrieveColumn
JetEscrowUpdate
JetIntersectIndexes
JetPrepareUpdate
JetBeginExternalBackup
JetGetColumnInfo
JetCreateIndex
JetSetColumnDefaultValue
mscms
SetColorProfileElementSize
CheckColors
CheckBitmapBits
EnumColorProfilesA
RegisterCMMA
TranslateBitmapBits
UnregisterCMMA
CreateProfileFromLogColorSpaceW
CreateProfileFromLogColorSpaceA
IsColorProfileTagPresent
SetStandardColorSpaceProfileW
GetColorProfileHeader
InstallColorProfileA
GetPS2ColorSpaceArray
GetCountColorProfileElements
GetStandardColorSpaceProfileA
TranslateColors
SetColorProfileElementReference
SetStandardColorSpaceProfileA
CreateColorTransformA
EnumColorProfilesW
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ