Static task
static1
Behavioral task
behavioral1
Sample
949e1bd54a5ba5d5bc15e0ba04e7e1881572b3dbcdcaea77ee412bd9dfc2bfb0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
949e1bd54a5ba5d5bc15e0ba04e7e1881572b3dbcdcaea77ee412bd9dfc2bfb0.exe
Resource
win10v2004-20220901-en
General
-
Target
949e1bd54a5ba5d5bc15e0ba04e7e1881572b3dbcdcaea77ee412bd9dfc2bfb0
-
Size
725KB
-
MD5
a0d15a3136256025cb9917347b0105b0
-
SHA1
f6880725c8760a0f20069173ee5486e653b57778
-
SHA256
949e1bd54a5ba5d5bc15e0ba04e7e1881572b3dbcdcaea77ee412bd9dfc2bfb0
-
SHA512
449f68b63813e78e773343ce2a88ff4edec3a8c8884167bc3b79c175f8d0468af705c29de07c810380689a12cb05f2da8e921c4df475b52f92bca0ddc7cbd9dc
-
SSDEEP
12288:9QOMKA5qGIELONIAmDK+43UjFYL2sxBnnFAa/Mp1ESh:9QG4RIhIAmDZpS2EnyZp
Malware Config
Signatures
Files
-
949e1bd54a5ba5d5bc15e0ba04e7e1881572b3dbcdcaea77ee412bd9dfc2bfb0.exe windows x86
b7566b1b21011cb3742b5ff175f9039f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
EnumDependentServicesA
ntdll
NtCancelIoFile
RtlInitAnsiString
CsrClientCallServer
oleaut32
VarDecFromUI8
kernel32
GetUserDefaultLCID
PulseEvent
shell32
SHGetSpecialFolderPathA
user32
GetDialogBaseUnits
Sections
.text Size: 716KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE