Static task
static1
Behavioral task
behavioral1
Sample
56e8d5fef2ba3a85685f8cdad0d851f14948d84d58f96ebec4a438949fa4ab40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56e8d5fef2ba3a85685f8cdad0d851f14948d84d58f96ebec4a438949fa4ab40.exe
Resource
win10v2004-20220812-en
General
-
Target
56e8d5fef2ba3a85685f8cdad0d851f14948d84d58f96ebec4a438949fa4ab40
-
Size
349KB
-
MD5
07b9674e1be386f8560cfac9e8280c90
-
SHA1
7ac09ca82698d6adb5f2dbee8b8ffec73db1b43b
-
SHA256
56e8d5fef2ba3a85685f8cdad0d851f14948d84d58f96ebec4a438949fa4ab40
-
SHA512
82b879f17ef5b6e9e23cbc3f4d237e19b989615d41043e4e939840fa894f1bdcbbb6e84bbaf2fd461e743312bd529179773aeff8999e35cf40ff17cf57af9c09
-
SSDEEP
6144:K3PWA5TmezlDn9d+vUfHPQO0ZfZkU7+xpJioNQn+Jz5c:n7ezlb6O9LClAz5c
Malware Config
Signatures
Files
-
56e8d5fef2ba3a85685f8cdad0d851f14948d84d58f96ebec4a438949fa4ab40.exe windows x86
cdc75b0f11e33ff5648e9e4dbd54edeb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDeferWindowPos
UnregisterClassA
IsRectEmpty
BringWindowToTop
advapi32
LookupPrivilegeDisplayNameW
TrusteeAccessToObjectA
SetPrivateObjectSecurity
DuplicateToken
CreateWellKnownSid
ImpersonateLoggedOnUser
ControlTraceA
ole32
CreateStreamOnHGlobal
OleSetContainedObject
ProgIDFromCLSID
CLSIDFromProgIDEx
CoAddRefServerProcess
kernel32
ExitProcess
GetStartupInfoA
VirtualProtect
GlobalUnlock
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 891B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE