Static task
static1
Behavioral task
behavioral1
Sample
3865dd2717a9c84a227d60a43567bce0f7956a8bce6dbdb9b4588da8bc4191f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3865dd2717a9c84a227d60a43567bce0f7956a8bce6dbdb9b4588da8bc4191f5.exe
Resource
win10v2004-20220812-en
General
-
Target
3865dd2717a9c84a227d60a43567bce0f7956a8bce6dbdb9b4588da8bc4191f5
-
Size
62KB
-
MD5
84b7dd1300eae8916c0b73dd528ca560
-
SHA1
01630961a5f694b6d59b6b1432ef3ef41b540252
-
SHA256
3865dd2717a9c84a227d60a43567bce0f7956a8bce6dbdb9b4588da8bc4191f5
-
SHA512
da82b6cb8dbff9f50eace3181f8c059df98fba4f1389843a0801f00de066433af940b7ea6a0e8c22704beb4f3b9e5b324d634db03802cd8fbcd6b7ca2e6d9eb8
-
SSDEEP
1536:z2LvvcGJBixuW7dPjQlfSFIsO+aOKcLllWLM2:z2zcGJBibDJvMM
Malware Config
Signatures
Files
-
3865dd2717a9c84a227d60a43567bce0f7956a8bce6dbdb9b4588da8bc4191f5.exe windows x86
573066823f761f123ba4cc862787084a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
DialogBoxParamA
EndDialog
GetClassWord
GetKeyboardLayout
SetClassLongW
imm32
ImmAssociateContext
userenv
ExpandEnvironmentStringsForUserA
GetGPOListA
FreeGPOListW
RefreshPolicy
GetAllUsersProfileDirectoryA
GetAppliedGPOListA
GetUserProfileDirectoryA
GetAppliedGPOListW
GetDefaultUserProfileDirectoryA
CreateEnvironmentBlock
UnregisterGPNotification
kernel32
InitializeCriticalSection
InterlockedDecrement
GetProcAddress
IsDebuggerPresent
FileTimeToDosDateTime
GetPriorityClass
AssignProcessToJobObject
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 939B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE