Static task
static1
Behavioral task
behavioral1
Sample
0091f0961503104b4673fde6aca8b40e4c763cdacd6c2036140f0f87de255344.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0091f0961503104b4673fde6aca8b40e4c763cdacd6c2036140f0f87de255344.exe
Resource
win10v2004-20220812-en
General
-
Target
0091f0961503104b4673fde6aca8b40e4c763cdacd6c2036140f0f87de255344
-
Size
164KB
-
MD5
0dfac81814286c36e79759276d7fa3d1
-
SHA1
d1292f92f7458db9a01da92db03c7d17ad0099e5
-
SHA256
0091f0961503104b4673fde6aca8b40e4c763cdacd6c2036140f0f87de255344
-
SHA512
7def81f139754be7e008e55831b1b93c8555b9b63377d74f79c43770d1edc1a2f62b591746f19eedb5c7bcf44fa006e92ceeab5463d00f8d5174909b77e6c442
-
SSDEEP
3072:i/V7/UbHiAnrqYd6F0V0YRnTXK2LoYFW4tr6QR+Fb:i/mHdec1RnDrLtr+
Malware Config
Signatures
Files
-
0091f0961503104b4673fde6aca8b40e4c763cdacd6c2036140f0f87de255344.exe windows x86
0ad64db5c4eb446eb98043c6822ba285
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
lstrcmpiA
VirtualAlloc
RtlMoveMemory
OpenProcess
GetCommandLineA
GetCommandLineW
VirtualFree
GetStartupInfoA
GlobalFindAtomW
RemoveDirectoryA
user32
GetDesktopWindow
Sections
.text Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Trmeq, N Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ