Static task
static1
Behavioral task
behavioral1
Sample
74112a1645ccc7b9357080812694d7d0791dfe0b9d5282d8fa9c95796cb3ecec.exe
Resource
win7-20220812-en
General
-
Target
74112a1645ccc7b9357080812694d7d0791dfe0b9d5282d8fa9c95796cb3ecec
-
Size
94KB
-
MD5
53f427305d8b46ae4e5343dd0ecc69a0
-
SHA1
220b96017881b6e95fb28f498cef159c68a9d4d5
-
SHA256
74112a1645ccc7b9357080812694d7d0791dfe0b9d5282d8fa9c95796cb3ecec
-
SHA512
7fc457f035ec9ae495df78eac21c10f5657c18e8cc3331bfc998c5b80a446c325b3e18e13d079d347f53fb46d291cf512a3dc84f635e54d29165f73becc52fcd
-
SSDEEP
1536:NBgd6TOhJ9O6MOjnosrS7QUnf5EgXL40fiuMUcKLkVK2fydXYQBl6cD:NBgd6TOr9O6MOks+EUXLffiJKgVKh9B3
Malware Config
Signatures
Files
-
74112a1645ccc7b9357080812694d7d0791dfe0b9d5282d8fa9c95796cb3ecec.exe windows x86
1a53b53d0f9b42b90f438cc31868bb3d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
OpenIcon
WindowFromPoint
ReplyMessage
kernel32
lstrcpynA
WriteFile
EnterCriticalSection
GetConsoleCursorMode
lstrlenA
SetCurrentDirectoryA
DeleteCriticalSection
VirtualQuery
GetProfileIntA
InitializeCriticalSection
GetThreadLocale
UnhandledExceptionFilter
VirtualFree
WideCharToMultiByte
GetModuleFileNameA
FindClose
GetStdHandle
GetStartupInfoA
FindFirstFileA
GetSystemDefaultUILanguage
ExitThread
GetLocaleInfoA
GetCurrentDirectoryA
LeaveCriticalSection
OpenFileMappingW
FreeLibrary
FindClose
FindNextFileW
FindFirstFileW
lstrcmpiA
lstrcmpW
advapi32
RegSetValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
gdi32
UnrealizeObject
oleaut32
SysFreeString
SysAllocStringLen
SysReAllocStringLen
SysFreeString
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE