Static task
static1
Behavioral task
behavioral1
Sample
783774cd1de18efeda09ed1b5a28511df0f3fe8415030954d28db7843d6921bd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
783774cd1de18efeda09ed1b5a28511df0f3fe8415030954d28db7843d6921bd.exe
Resource
win10v2004-20220812-en
General
-
Target
783774cd1de18efeda09ed1b5a28511df0f3fe8415030954d28db7843d6921bd
-
Size
41KB
-
MD5
0eb2359c42f2df50bd013b76a4c79610
-
SHA1
a562bedcdb409307840e7cef3de9760509e152ef
-
SHA256
783774cd1de18efeda09ed1b5a28511df0f3fe8415030954d28db7843d6921bd
-
SHA512
9d3b1e3e7261c29d2187f21b37d1c5ecc578bcb2a85a9fb84152cd28522618e3f512ed6c3f00581f4178eb6185a7baa2f2e06538f064cbf53536c7d81d2c3583
-
SSDEEP
768:Dhmf0vB9BB0ySq4HHsPl3fzdRc+lLSzHmvmg:DhmfaVPl3LD7lXd
Malware Config
Signatures
Files
-
783774cd1de18efeda09ed1b5a28511df0f3fe8415030954d28db7843d6921bd.exe windows x86
8b52fd1ccef5bb5b41ddfce1fe327186
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetVersionExA
InitializeCriticalSection
GetProcAddress
user32
EndDialog
DialogBoxParamA
SendMessageA
resutils
ResUtilGetEnvironmentWithNetName
ResUtilGetMultiSzProperty
ResUtilGetProperties
ResUtilGetPropertySize
ResUtilGetBinaryValue
ResUtilGetResourceDependency
ResUtilSetMultiSzValue
ResUtilSetPropertyTableEx
ResUtilVerifyPropertyTable
ResUtilGetResourceDependentIPAddressProps
ResUtilIsResourceClassEqual
ResUtilFindMultiSzProperty
ResUtilPropertyListFromParameterBlock
ResUtilAddUnknownProperties
ResUtilStopService
ResUtilDupParameterBlock
ResUtilDupString
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 959B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ