Static task
static1
Behavioral task
behavioral1
Sample
333768a3ddba07aed71caed86980f3366e249516513ae9f6fbe96478b9000e37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
333768a3ddba07aed71caed86980f3366e249516513ae9f6fbe96478b9000e37.exe
Resource
win10v2004-20220812-en
General
-
Target
333768a3ddba07aed71caed86980f3366e249516513ae9f6fbe96478b9000e37
-
Size
142KB
-
MD5
05c47695f47f87bb381565f31c8207f8
-
SHA1
d5bae6b47f5a080f69ab73504d36eb587d71d1d6
-
SHA256
333768a3ddba07aed71caed86980f3366e249516513ae9f6fbe96478b9000e37
-
SHA512
d371647ae775137b6a5a3043ab2a60cca21a557e1034a1410a2e787a6f1a4e7281171907eb767ad99d20fd7e9c01e54eec98d0bf983163c70cbacadef17d44f3
-
SSDEEP
3072:OgNlm2GbpBny2G9RWHM0uUK74LSrua88hY1UIA0TWwJAwh+zOd:OYlG4RaMh7MLXaVIxq0AI4
Malware Config
Signatures
Files
-
333768a3ddba07aed71caed86980f3366e249516513ae9f6fbe96478b9000e37.exe windows x86
0bc33e5022a01d4bb0f18bf465387827
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcpy
kernel32
CreateMutexA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
advapi32
RegQueryValueExA
shell32
SHGetFolderPathA
shlwapi
StrStrIA
winhttp
WinHttpReceiveResponse
ws2_32
ntohs
netapi32
NetUserGetInfo
user32
MessageBoxA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.rsrc1 Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE