Static task
static1
Behavioral task
behavioral1
Sample
5095d2932809ba71a45f79130c495eae30fcadd5e33ffc7728ed206639ffdf10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5095d2932809ba71a45f79130c495eae30fcadd5e33ffc7728ed206639ffdf10.exe
Resource
win10v2004-20220812-en
General
-
Target
5095d2932809ba71a45f79130c495eae30fcadd5e33ffc7728ed206639ffdf10
-
Size
625KB
-
MD5
0e2a03575198ebf2850bc444a2e454e0
-
SHA1
17bf4b5c732d7119f5d1be17c18914beb80131c2
-
SHA256
5095d2932809ba71a45f79130c495eae30fcadd5e33ffc7728ed206639ffdf10
-
SHA512
39be43af2fb5a1d53f71b4cc85fd95025d78ecaad1582bff7f92b6fa961d7d9c7cd446efabd5f8ab5acc7b86be6d6d0d375080db97091166ce01c797670ace12
-
SSDEEP
12288:VHjcoe9PH96vB/fAuBcm9TyOE/xG3muGx44MG4Yx:VDgINfAuBcgcZG2uG24MG4Y
Malware Config
Signatures
Files
-
5095d2932809ba71a45f79130c495eae30fcadd5e33ffc7728ed206639ffdf10.exe windows x86
b36eb9a4c6fca2002f3fab21d6da4be8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
iphlpapi
GetAdaptersInfo
ws2_32
htonl
wtsapi32
WTSRegisterSessionNotification
Sections
.MPRESS1 Size: 438KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE