Static task
static1
Behavioral task
behavioral1
Sample
c786e2f5e11dcbc288ad8010e094c719cc17340c7e20e292f961640ab3b5e112.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c786e2f5e11dcbc288ad8010e094c719cc17340c7e20e292f961640ab3b5e112.exe
Resource
win10v2004-20220812-en
General
-
Target
c786e2f5e11dcbc288ad8010e094c719cc17340c7e20e292f961640ab3b5e112
-
Size
447KB
-
MD5
27f0e4bd694a0b4aa4c7ac9b5f41e9c0
-
SHA1
9c0b59d7c94d2e1fddf0191480fb05cf8bedc43d
-
SHA256
c786e2f5e11dcbc288ad8010e094c719cc17340c7e20e292f961640ab3b5e112
-
SHA512
f9a3d5829b8c62c827f2e9fc4292e33abea254f73f11e92c51eb4bc5709667bc965ba2bca0065d88380aca384aaab046708b043b8c37c8efc728c4b785fdf2ac
-
SSDEEP
12288:GrPsuYx8U4ie38JqfQFCoceIkUshx/I5qzheY7fy4t9UHHhrsY:Grkuq8n380HocivkY7fy4qsY
Malware Config
Signatures
Files
-
c786e2f5e11dcbc288ad8010e094c719cc17340c7e20e292f961640ab3b5e112.exe windows x86
a074f0cd4c6dd0c5d9b7cd44c2dff2f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwAssignProcessToJobObject
NtSetBootEntryOrder
advapi32
LsaEnumeratePrivileges
oleaut32
VarBstrFromDec
user32
GetOpenClipboardWindow
GetMessagePos
kernel32
GetLastError
Sections
.text Size: 440KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE