Static task
static1
Behavioral task
behavioral1
Sample
37c3f95998b90ac3aa70a490969492cebf19fc70de6da1ace34097f3d8fc2a9a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
37c3f95998b90ac3aa70a490969492cebf19fc70de6da1ace34097f3d8fc2a9a.exe
Resource
win10v2004-20220901-en
General
-
Target
37c3f95998b90ac3aa70a490969492cebf19fc70de6da1ace34097f3d8fc2a9a
-
Size
80KB
-
MD5
c7bafab27ddeff16d52a03d8d0188a93
-
SHA1
4a5eac12273e08d880e05b55f08d0ab3f79d0b64
-
SHA256
37c3f95998b90ac3aa70a490969492cebf19fc70de6da1ace34097f3d8fc2a9a
-
SHA512
2a86336474325e3b3a2aa12330b835b7134a74ca45b545232abfaa532abb6acd2a1f26db0d521eee71267380958149604365dd01548b08bac988161bc1ceba54
-
SSDEEP
768:yhzju6DxGAR2IQLYsyebFGhc0MlN71devHCjXgyjavJP6y9NZXru33gcZ:yhO6oIQnfcjyjaR6y9bu33r
Malware Config
Signatures
Files
-
37c3f95998b90ac3aa70a490969492cebf19fc70de6da1ace34097f3d8fc2a9a.exe windows x86
767a98ba18bfc85a99ce3d5d2979580f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
InterlockedExchange
FreeLibrary
LoadLibraryA
LocalAlloc
HeapFree
GetCurrentProcess
HeapAlloc
CreateProcessW
GetNativeSystemInfo
RaiseException
CloseHandle
GetDateFormatW
GetStdHandle
GetProcAddress
HeapFree
user32
GetDlgItem
KillTimer
LoadImageW
LoadStringW
SetTimer
IsDialogMessageW
PostQuitMessage
DestroyWindow
CreateDialogParamW
IsWindow
SendMessageW
SetWindowTextW
DialogBoxParamW
ShowWindow
advapi32
InitializeSecurityDescriptor
GetTokenInformation
OpenProcessToken
SetSecurityDescriptorDacl
LookupPrivilegeValueW
FreeSid
GetLengthSid
AdjustTokenPrivileges
InitiateSystemShutdownExW
CreateProcessAsUserW
shell32
ord654
SHGetMalloc
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ