Static task
static1
Behavioral task
behavioral1
Sample
37f6a4381cdf251e86a1e7c8c58d12fa5c718274d4a0b960b728e440088be95d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
37f6a4381cdf251e86a1e7c8c58d12fa5c718274d4a0b960b728e440088be95d.exe
Resource
win10v2004-20220812-en
General
-
Target
37f6a4381cdf251e86a1e7c8c58d12fa5c718274d4a0b960b728e440088be95d
-
Size
62KB
-
MD5
3061df237de2ea31d8bfa2b1ecce9200
-
SHA1
0783a358a21f48a2027becf70251f0627be6976c
-
SHA256
37f6a4381cdf251e86a1e7c8c58d12fa5c718274d4a0b960b728e440088be95d
-
SHA512
404eb23f3eb3c9bf3599732ccc9cd70d08ded57ec45f9db9237150c19dc2cab0d982447fbe08ff59bb8f3a427318d49568d877e8f2fdd8aac7ec8401c22ccd93
-
SSDEEP
1536:P2LvvcGJBixuW7dPjQlfSFIsO+aOKcLllWLM2:P2zcGJBibDJvMM
Malware Config
Signatures
Files
-
37f6a4381cdf251e86a1e7c8c58d12fa5c718274d4a0b960b728e440088be95d.exe windows x86
573066823f761f123ba4cc862787084a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
DialogBoxParamA
EndDialog
GetClassWord
GetKeyboardLayout
SetClassLongW
imm32
ImmAssociateContext
userenv
ExpandEnvironmentStringsForUserA
GetGPOListA
FreeGPOListW
RefreshPolicy
GetAllUsersProfileDirectoryA
GetAppliedGPOListA
GetUserProfileDirectoryA
GetAppliedGPOListW
GetDefaultUserProfileDirectoryA
CreateEnvironmentBlock
UnregisterGPNotification
kernel32
InitializeCriticalSection
InterlockedDecrement
GetProcAddress
IsDebuggerPresent
FileTimeToDosDateTime
GetPriorityClass
AssignProcessToJobObject
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 939B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE