Static task
static1
Behavioral task
behavioral1
Sample
1643e861de719c3e38148a8211ffb7ecdf328ee18f8c232952b2de1c09ead4e2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1643e861de719c3e38148a8211ffb7ecdf328ee18f8c232952b2de1c09ead4e2.exe
Resource
win10v2004-20220812-en
General
-
Target
1643e861de719c3e38148a8211ffb7ecdf328ee18f8c232952b2de1c09ead4e2
-
Size
27KB
-
MD5
83424bf127ebfdfbad1acee382b84201
-
SHA1
bec2e892048caf4ec027c781ccb92afbc5605afd
-
SHA256
1643e861de719c3e38148a8211ffb7ecdf328ee18f8c232952b2de1c09ead4e2
-
SHA512
bb87c8070e88fd4a7e2f0ce53776ccfa464745491c341a7205de655c94cee6104373f79c719f484d11c0d278b237f24e30e36a91ebc738c05a7369be828083fe
-
SSDEEP
384:i85tAxMv123gcrAdmK4XGJCmR7iFXjFIlfJh5m5HBSnqo/U64CmRlJ0xqZXsSX:HtAppK4XGJC27iFXilfl0BoN8J
Malware Config
Signatures
Files
-
1643e861de719c3e38148a8211ffb7ecdf328ee18f8c232952b2de1c09ead4e2.exe windows x86
3301e0d085a224b606b172a562b64f3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
Sleep
GetProcAddress
LoadLibraryA
RtlZeroMemory
CreateThread
lstrcpyA
GetStartupInfoW
GetModuleHandleW
ExitProcess
ntdll
_wcsnicmp
memset
user32
GetMessageA
TranslateMessage
DispatchMessageW
powrprof
IsPwrShutdownAllowed
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
__wgetmainargs
_wcmdln
_adjust_fdiv
__setusermatherr
_exit
_XcptFilter
exit
_initterm
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ