Static task
static1
Behavioral task
behavioral1
Sample
c62707cdce1226631dfb2e480be4c167dcf51a5a14f8c80adffbcf5c9e6ef262.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c62707cdce1226631dfb2e480be4c167dcf51a5a14f8c80adffbcf5c9e6ef262.exe
Resource
win10v2004-20220812-en
General
-
Target
c62707cdce1226631dfb2e480be4c167dcf51a5a14f8c80adffbcf5c9e6ef262
-
Size
1.1MB
-
MD5
b43a51a758831dfcb3ca3264143ac1c0
-
SHA1
569efdf1e3eced30453b8e036ce8037001f72206
-
SHA256
c62707cdce1226631dfb2e480be4c167dcf51a5a14f8c80adffbcf5c9e6ef262
-
SHA512
049ba0d6d8577521a44f6a2d0aa7d80519c65e06e6ccb9f8dea54670005d5f465cc5e4457f6e9c7f6859d15068abcd96f0c095f942db2eb98d4c4d17e703046a
-
SSDEEP
24576:/DYTgEg+xwk95QXymtUpLkWlcmYadAmAOjGA2kvZJQSIYQXaFEmIr:/DO/rak5SU9EeAmAiGA2k0dYQpr
Malware Config
Signatures
Files
-
c62707cdce1226631dfb2e480be4c167dcf51a5a14f8c80adffbcf5c9e6ef262.exe windows x86
fe037a6d38678640ffc20274574ecf58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommState
QueryPerformanceFrequency
GlobalMemoryStatusEx
VirtualAlloc
Process32FirstW
GetCurrentDirectoryW
GetProcessTimes
GetProcAddress
gdi32
CreateBrushIndirect
SetICMMode
FillRgn
AnyLinkedFonts
CreateSolidBrush
DescribePixelFormat
CreateRectRgnIndirect
GdiGetPageCount
SetMetaFileBitsEx
SetDIBits
winsta
LogonIdFromWinStationNameW
WinStationGetAllProcesses
ServerLicensingGetAvailablePolicyIds
WinStationEnumerateW
WinStationFreeMemory
ServerLicensingOpenW
WinStationReset
ServerLicensingSetPolicy
WinStationDisconnect
WinStationEnumerateProcesses
ServerLicensingGetPolicy
WinStationQueryInformationW
WinStationOpenServerW
WinStationConnectW
rpcrt4
UuidToStringA
RpcBindingFree
I_RpcGetBufferWithObject
RpcServerUseProtseqA
RpcServerInqBindings
I_RpcAsyncAbortCall
RpcMgmtSetServerStackSize
UuidToStringW
NdrMesTypeDecode2
RpcServerUseProtseqEpExW
RpcAsyncCompleteCall
RpcServerUseProtseqW
I_RpcBindingInqTransportType
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
RpcBindingSetAuthInfoExW
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 232KB - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 368KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 168KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 332KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ