Static task
static1
Behavioral task
behavioral1
Sample
385ef36ddfc1d1921e46d5ab33c047f632bc6f42e25dc4badccda8b70ba1a78e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
385ef36ddfc1d1921e46d5ab33c047f632bc6f42e25dc4badccda8b70ba1a78e.exe
Resource
win10v2004-20220812-en
General
-
Target
385ef36ddfc1d1921e46d5ab33c047f632bc6f42e25dc4badccda8b70ba1a78e
-
Size
439KB
-
MD5
933a7a2635cbf819e2e8e5abeeae1fe0
-
SHA1
deb85b51727deca9c7de50b9d127d54fe4cf07cd
-
SHA256
385ef36ddfc1d1921e46d5ab33c047f632bc6f42e25dc4badccda8b70ba1a78e
-
SHA512
569f474303a71c03baab4f04eaa5a47c68fd507afb0e8feb97abc14490cf416afe4ca4b686af1f6199de549bd170f02e3625416bad9dc6a010d70d2e39613aea
-
SSDEEP
6144:BDPc+ilaxLQVAH5PvzBg9vdXe79j/jdWkc1Ez9azSLAS6nR9pju5uWMOmU/:mkEVu4vdXYIkKzaMLWMOX
Malware Config
Signatures
Files
-
385ef36ddfc1d1921e46d5ab33c047f632bc6f42e25dc4badccda8b70ba1a78e.exe windows x86
5a18b0cf74671d564f5303a1b01ee2d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptGetDefaultProviderA
shell32
DAD_SetDragImage
oleaut32
VarR8FromUI1
ntdll
ZwCreateFile
kernel32
GetConsoleWindow
GetUserDefaultLangID
user32
GetCapture
Sections
.text Size: 437KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 251B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE