Static task
static1
Behavioral task
behavioral1
Sample
40e6a0d265e6c2302e4188c1702398ab6bbc82c780f2fb4c40e87f60b4c43040.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
40e6a0d265e6c2302e4188c1702398ab6bbc82c780f2fb4c40e87f60b4c43040.exe
Resource
win10v2004-20220812-en
General
-
Target
40e6a0d265e6c2302e4188c1702398ab6bbc82c780f2fb4c40e87f60b4c43040
-
Size
863KB
-
MD5
307632865d561e69716239c3042bfdc7
-
SHA1
33cbdb4ea112a2e268438baf2747f2b61454f750
-
SHA256
40e6a0d265e6c2302e4188c1702398ab6bbc82c780f2fb4c40e87f60b4c43040
-
SHA512
c58c8fcf8730a0492238ecae865d39a93535b048f7266c0637ea4ff6f7e6c2a93b22de2aa32a56d40898ad320c79c22b7fee1b9437626870181d9954152541dc
-
SSDEEP
12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Malware Config
Signatures
Files
-
40e6a0d265e6c2302e4188c1702398ab6bbc82c780f2fb4c40e87f60b4c43040.exe windows x86
b36eb9a4c6fca2002f3fab21d6da4be8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
iphlpapi
GetAdaptersInfo
ws2_32
htonl
wtsapi32
WTSRegisterSessionNotification
Sections
.MPRESS1 Size: 438KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE