Static task
static1
Behavioral task
behavioral1
Sample
a737a7aa96f907324e4dbc324b1f6885bdc7183416da0280d1ae29f3f3c51ed5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a737a7aa96f907324e4dbc324b1f6885bdc7183416da0280d1ae29f3f3c51ed5.exe
Resource
win10v2004-20221111-en
General
-
Target
a737a7aa96f907324e4dbc324b1f6885bdc7183416da0280d1ae29f3f3c51ed5
-
Size
788KB
-
MD5
09fa4d56265c689d82fe959db4da9450
-
SHA1
b37f685c4cfe44118914f51979a8007f73a1fa22
-
SHA256
a737a7aa96f907324e4dbc324b1f6885bdc7183416da0280d1ae29f3f3c51ed5
-
SHA512
9b6c5ed2a3b0fc76f01840e36e6c66657e2b03e74d1dcaf0ca73a535bcc9ca5d730de7f27dedb9ac959dbae44855fdc4848d69d344bf0ea7a20bd53d951f7aab
-
SSDEEP
12288:WxifB5kzDnt80GqZGCU98rUuxABx/vToLL6s8yIVvX5iY4JSBSwIRpt89:WwfH4rtbFGV98x8bovn8yIJX5mgBlK69
Malware Config
Signatures
Files
-
a737a7aa96f907324e4dbc324b1f6885bdc7183416da0280d1ae29f3f3c51ed5.exe windows x86
c6f526f3494b572f3894b0bd64fec434
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetActiveWindow
SendInput
GetDialogBaseUnits
oleaut32
VarDateFromUI4
ntdll
CsrGetProcessId
NtCreateMailslotFile
advapi32
CredMarshalCredentialW
kernel32
GetCurrentProcess
Sections
.text Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE