Static task
static1
Behavioral task
behavioral1
Sample
1f98e3577cbd93b1c22884a0ce0a45b8049c95edd874857df5990c878bf455b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1f98e3577cbd93b1c22884a0ce0a45b8049c95edd874857df5990c878bf455b3.exe
Resource
win10v2004-20220901-en
General
-
Target
1f98e3577cbd93b1c22884a0ce0a45b8049c95edd874857df5990c878bf455b3
-
Size
237KB
-
MD5
05765d31bdf954332a93c13981dc8ca0
-
SHA1
a2fff8d961558fc66d4bc9ab91aa7394d76243b6
-
SHA256
1f98e3577cbd93b1c22884a0ce0a45b8049c95edd874857df5990c878bf455b3
-
SHA512
883000f962528f60bf7ee6f49ca6fb69e8f5a3efc648b33c17812eb3434c84c509d6d61aac7c9c38dfd1249d308bb2f547c731fb4407ae88f4f53257cab9a6ea
-
SSDEEP
6144:bLYlr6cjAFGU/nLTp9Q1V5ywoC1Wg+SvlNw:bLYlr6ndi1V5ywoC1Wgd7
Malware Config
Signatures
Files
-
1f98e3577cbd93b1c22884a0ce0a45b8049c95edd874857df5990c878bf455b3.exe windows x86
0d1fe1f00689f8c8a204c7e750ff2801
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
RtlZeroMemory
CreateThread
lstrcpyA
WaitForSingleObject
ExitProcess
ntdll
_wcsnicmp
user32
GetActiveWindow
DispatchMessageW
GetMessageA
TranslateMessage
MessageBoxW
comdlg32
GetOpenFileNameW
shell32
ShellAboutW
powrprof
IsPwrShutdownAllowed
GetPwrCapabilities
GetActivePwrScheme
clusapi
ClusterEnum
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE