Static task
static1
Behavioral task
behavioral1
Sample
75724cc364369f7af9bb296c8ccec94792f273e4eb291034551a7b7bac6b5b21.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75724cc364369f7af9bb296c8ccec94792f273e4eb291034551a7b7bac6b5b21.exe
Resource
win10v2004-20220901-en
General
-
Target
75724cc364369f7af9bb296c8ccec94792f273e4eb291034551a7b7bac6b5b21
-
Size
743KB
-
MD5
8216a9e27001a31503cc239b84681270
-
SHA1
ddedb7becc2ec6e6d49044248c56c18ee33aa756
-
SHA256
75724cc364369f7af9bb296c8ccec94792f273e4eb291034551a7b7bac6b5b21
-
SHA512
9ae31734bc0e43e34d114851f84051014590054d3af63c8d66b9d309777e36f3ba8a1aea4f69cad34b8366b69fd7b35cb4c73904abd223608938cbd31f7f7ec6
-
SSDEEP
12288:5G+uuZEZCZrZBQ6u3QaD/7pMU5y3saceZd/B4cFVJBtpd:cbYEAZlBQT9DdMU5ytvac/P7d
Malware Config
Signatures
Files
-
75724cc364369f7af9bb296c8ccec94792f273e4eb291034551a7b7bac6b5b21.exe windows x86
cfd52b58616f7619306af816230ab6c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleHandleA
WaitForSingleObject
ActivateActCtx
CreateActCtxA
CreateThread
ExitProcess
GetEnvironmentStringsA
GetLocalTime
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
FindFirstFileW
GetTempPathA
GetCommandLineA
HeapFree
QueryPerformanceCounter
lstrcmpA
GlobalAddAtomW
IsBadReadPtr
TlsGetValue
GetStringTypeA
DeleteFileA
GetLocaleInfoW
GetOEMCP
InterlockedIncrement
GetModuleFileNameW
GetVolumeInformationW
GetEnvironmentStringsW
HeapCreate
HeapAlloc
TlsFree
GetCurrentProcess
SetErrorMode
GetCommandLineW
TlsAlloc
LCMapStringA
GlobalSize
CreateFileA
GlobalUnlock
InterlockedExchange
GlobalGetAtomNameW
ConvertDefaultLocale
Sections
.text Size: 614KB - Virtual size: 613KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 168B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ