Static task
static1
Behavioral task
behavioral1
Sample
7011586a5d3d71264625942e96249d49ed8e0eb882abec37ad44b706291ffdd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7011586a5d3d71264625942e96249d49ed8e0eb882abec37ad44b706291ffdd9.exe
Resource
win10v2004-20220901-en
General
-
Target
7011586a5d3d71264625942e96249d49ed8e0eb882abec37ad44b706291ffdd9
-
Size
1.3MB
-
MD5
fcfc7afb7874b08936adccddf230a938
-
SHA1
511ed9a6c02b3dafcedf4eab6c6ff1c57c7d989b
-
SHA256
7011586a5d3d71264625942e96249d49ed8e0eb882abec37ad44b706291ffdd9
-
SHA512
6b1b82520beca0e5287413c71aa39c3cc07e2cffeff3a71292fbe9c714948606eba724c964f1b3a38f3884eea464426f7aee3c8ea610e2279d909cf8381984c8
-
SSDEEP
24576:eXeydBRi3YXB296ycYAveLhE13r1reruTXVEEQM+BbKgSiGMUY8YUz:38BRA596E2v7xEG+1KgVj
Malware Config
Signatures
Files
-
7011586a5d3d71264625942e96249d49ed8e0eb882abec37ad44b706291ffdd9.exe windows x86
39ef72259560a33829bbf2b86e4ded4e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObjectEx
GetProcessId
LoadLibraryExW
ReadFile
HeapSize
VirtualProtectEx
CreateDirectoryA
WriteConsoleW
GetConsoleAliasW
GetDateFormatW
GetPrivateProfileIntA
GetGeoInfoW
lstrcmpi
GetModuleHandleA
lstrcpynA
nddeapi
NDdeShareDelA
NDdeShareEnumA
NDdeShareSetInfoA
NDdeShareGetInfoA
cmutil
CmRealloc
CmAtolA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ