Static task
static1
Behavioral task
behavioral1
Sample
33fe95fdee6fb2d64c87202b6e90634883fba9418ba7ba464981ee9fac710271.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
33fe95fdee6fb2d64c87202b6e90634883fba9418ba7ba464981ee9fac710271.exe
Resource
win10v2004-20221111-en
General
-
Target
33fe95fdee6fb2d64c87202b6e90634883fba9418ba7ba464981ee9fac710271
-
Size
946KB
-
MD5
2fe8ebd8d868989558a3ccdb0b29ef30
-
SHA1
20d136002d07b4c9c47ce269722e56323d65d9b1
-
SHA256
33fe95fdee6fb2d64c87202b6e90634883fba9418ba7ba464981ee9fac710271
-
SHA512
6689520a3393c69f0391ea46a4f17de4ef8df5f334bab88590b82f7fc8ad0e9ccc1e6d8b6b75660423c58876d84201776ff23b5090d0b2681f727b35b6f66c1b
-
SSDEEP
24576:PjV0RGS/obdiyw+SwFQd7X9V9sREQmOMN+o:LV0M1bwH3X9XAMQo
Malware Config
Signatures
Files
-
33fe95fdee6fb2d64c87202b6e90634883fba9418ba7ba464981ee9fac710271.exe windows x86
171a710426095a26631d71d1b7290eb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CredMarshalCredentialA
oleaut32
VarCyNeg
user32
GetActiveWindow
GetForegroundWindow
kernel32
GetCurrentProcess
Sections
.text Size: 939KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE