Static task
static1
Behavioral task
behavioral1
Sample
7a14978fd9b34ef7cd00b47d3c658aad9a5cce6823945fb7ff504eacde6f3092.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a14978fd9b34ef7cd00b47d3c658aad9a5cce6823945fb7ff504eacde6f3092.exe
Resource
win10v2004-20220901-en
General
-
Target
7a14978fd9b34ef7cd00b47d3c658aad9a5cce6823945fb7ff504eacde6f3092
-
Size
631KB
-
MD5
92d6a54079bb3cbfd86bf84e914d479e
-
SHA1
5416d1148827f0055425e176e30b0829f2988458
-
SHA256
7a14978fd9b34ef7cd00b47d3c658aad9a5cce6823945fb7ff504eacde6f3092
-
SHA512
7edcfd94ef76f416dcf6dfb91b673717d5ffed207a1a02db507213224cca30b8e401121a57c7df4201dc302b43523045a2fc642c42d77f33b4f9282d5b6f8e39
-
SSDEEP
12288:nzXXeX20IeBetm2lKzVvjGe4RC36bpp4hmtv+FEDwZrLmGhpDVFXyF9bJvQItn:zXuXZIAea74RwOn4hmIqsZr9LDmF9bBr
Malware Config
Signatures
Files
-
7a14978fd9b34ef7cd00b47d3c658aad9a5cce6823945fb7ff504eacde6f3092.exe windows x86
3f95f2238c254dedadb5c87b4c2a2754
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
_hwrite
GetCurrentThread
FindNextVolumeW
SearchPathA
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
secur32
LsaDeregisterLogonProcess
AcceptSecurityContext
InitSecurityInterfaceW
LsaGetLogonSessionData
DeleteSecurityContext
DecryptMessage
tapi32
lineMakeCallA
lineShutdown
lineGetDevCaps
lineOpen
MMCGetLineInfo
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 275KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 275KB - Virtual size: 378KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ