Static task
static1
Behavioral task
behavioral1
Sample
731498f5decfbe9f09a1e2747399b28d873341eb3cf941c244a68bed2b039e27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
731498f5decfbe9f09a1e2747399b28d873341eb3cf941c244a68bed2b039e27.exe
Resource
win10v2004-20220901-en
General
-
Target
731498f5decfbe9f09a1e2747399b28d873341eb3cf941c244a68bed2b039e27
-
Size
569KB
-
MD5
830561ed923e1c863958b1c99262c060
-
SHA1
bdc4e1553ec01ca69334fbb92218634330be8754
-
SHA256
731498f5decfbe9f09a1e2747399b28d873341eb3cf941c244a68bed2b039e27
-
SHA512
e63efec0e845a9cfd1de5e060fb6e72b815fdd6b6fca32d87277ab6d6907c45c38ee55f9c184726c2e2fb4c42acf244ea7a8ecea1419c2ffb9e40fff93e61a46
-
SSDEEP
12288:trCxpDcpcTVSEP3i/qoX+ivMUqjNJOj32syETQrH86rC:YxVJdai8+ikdJw32HcQrH8v
Malware Config
Signatures
Files
-
731498f5decfbe9f09a1e2747399b28d873341eb3cf941c244a68bed2b039e27.exe windows x86
53e92335e74fd01f0d86758a87341ec2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteW
iphlpapi
GetAdaptersInfo
ws2_32
gethostbyaddr
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 64KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 398KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jehuhnc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE