Static task
static1
Behavioral task
behavioral1
Sample
736514fd0334a63ddff5df001aee800f33ead7e3dd81df08d81e07d7c1cea39e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
736514fd0334a63ddff5df001aee800f33ead7e3dd81df08d81e07d7c1cea39e.exe
Resource
win10v2004-20220812-en
General
-
Target
736514fd0334a63ddff5df001aee800f33ead7e3dd81df08d81e07d7c1cea39e
-
Size
438KB
-
MD5
84192cedf2653ce789627ad33e76d6d0
-
SHA1
ef8e31034261fe690e4d6494859aa5ae30c24426
-
SHA256
736514fd0334a63ddff5df001aee800f33ead7e3dd81df08d81e07d7c1cea39e
-
SHA512
29c7adcb3fe169228c8f0a5c33b5ce9d546d0a53b2e2aa256b252df0f9d1fe268ce704c5039ce65b4b886a03e065c732ade3dbed577cfef1e0267543bfae4277
-
SSDEEP
12288:ZMPrIRlpbhVE1+4ywaIcBkVa4AVApfMuL:6PrG9R4RdE4AVApf1L
Malware Config
Signatures
Files
-
736514fd0334a63ddff5df001aee800f33ead7e3dd81df08d81e07d7c1cea39e.exe windows x86
e8bbc039ee1455514d9081b24448f537
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
connect
ntdll
RtlUnicodeStringToAnsiString
NtEnumerateBootEntries
user32
IMPGetIMEW
GetProcessWindowStation
GetForegroundWindow
kernel32
GetUserDefaultUILanguage
Sections
.text Size: 435KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE