Static task
static1
Behavioral task
behavioral1
Sample
f0677a2d66e131e0b96a7d952a08e55089723aee15a5e3a0f8e2bfecd2faef53.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0677a2d66e131e0b96a7d952a08e55089723aee15a5e3a0f8e2bfecd2faef53.exe
Resource
win10v2004-20220901-en
General
-
Target
f0677a2d66e131e0b96a7d952a08e55089723aee15a5e3a0f8e2bfecd2faef53
-
Size
235KB
-
MD5
0caf0cd3d300f2576d0cfff87771fff0
-
SHA1
5acf1eed5fb12bac7235e12cfc9903223933d0f2
-
SHA256
f0677a2d66e131e0b96a7d952a08e55089723aee15a5e3a0f8e2bfecd2faef53
-
SHA512
90d25c745869668c305d059d474d3d9913642b7cf6fea83ba605ed9d2e191736347dd4125c36e1e54f0e9dff090fd4efdb5ee37b0978d4d2d81fbb6dcce96aae
-
SSDEEP
6144:GP/Er0Ka/4+HPPCs2zKNZ4YRlwh2JuFL:GP2iNHPPKuhche
Malware Config
Signatures
Files
-
f0677a2d66e131e0b96a7d952a08e55089723aee15a5e3a0f8e2bfecd2faef53.exe windows x86
5c92e4339fb4b64af9c16aa1cd58d316
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetModuleHandleA
LoadLibraryA
lstrcpyA
GetProcAddress
HeapCreate
GetProcessHeap
ExitProcess
SetUnhandledExceptionFilter
HeapAlloc
SetErrorMode
lstrlenA
OutputDebugStringA
ntdll
memcpy
user32
UpdateWindow
ShowWindow
DefWindowProcW
MessageBoxW
CreateWindowExA
MessageBoxA
GetMessageW
SetWindowPos
GetActiveWindow
FindWindowW
SetFocus
TranslateMessage
DispatchMessageW
powrprof
GetActivePwrScheme
GetPwrCapabilities
IsPwrHibernateAllowed
IsPwrShutdownAllowed
wintrust
WintrustGetRegPolicyFlags
crypt32
CertCreateCertificateChainEngine
imagehlp
MapFileAndCheckSumW
ImageEnumerateCertificates
winmm
mciSendStringW
clusapi
ClusterEnum
Sections
.text Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE