Static task
static1
Behavioral task
behavioral1
Sample
f658ea8ac9995365a08b2463e6b612f8796574854b3e45b15a88fceabe7351d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f658ea8ac9995365a08b2463e6b612f8796574854b3e45b15a88fceabe7351d6.exe
Resource
win10v2004-20220901-en
General
-
Target
f658ea8ac9995365a08b2463e6b612f8796574854b3e45b15a88fceabe7351d6
-
Size
285KB
-
MD5
0e71a9b7f096aa6a6ebc78093fe8f066
-
SHA1
5d8f3f82fa3a74fdc494dac6e0b95b0c783541a4
-
SHA256
f658ea8ac9995365a08b2463e6b612f8796574854b3e45b15a88fceabe7351d6
-
SHA512
58059ef5f22a8b0876910727ad07076a926f5651daa91da285b22cd8d0d64fc476b3799f01b81450f0f8681309516df5c785ab8d36d70ad090cee575970d24aa
-
SSDEEP
6144:gpGaQpJQSQ7aFSexdWgNPoL8QCZjYNh+rsmK7FVi67dI:gpGdpJQSAaFSeygNRQCZUNeK756
Malware Config
Signatures
Files
-
f658ea8ac9995365a08b2463e6b612f8796574854b3e45b15a88fceabe7351d6.exe windows x86
63dab86c73b6280ec1fe29c756d6d035
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
lstrcpyA
LoadLibraryA
GetProcAddress
GetStdHandle
TerminateProcess
SetConsoleMode
GlobalAlloc
WaitForSingleObject
SetUnhandledExceptionFilter
CreateThread
ExitProcess
ntdll
_wcsicmp
user32
KillTimer
TranslateMessage
ShowWindow
GetMessageW
OpenClipboard
UpdateWindow
DispatchMessageW
comdlg32
GetOpenFileNameW
powrprof
GetActivePwrScheme
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ