Static task
static1
Behavioral task
behavioral1
Sample
df48072a2e8e50b02ed352f69c995ede68ba567fc4f5ba601b6af70bb5efe3a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df48072a2e8e50b02ed352f69c995ede68ba567fc4f5ba601b6af70bb5efe3a1.exe
Resource
win10v2004-20221111-en
General
-
Target
df48072a2e8e50b02ed352f69c995ede68ba567fc4f5ba601b6af70bb5efe3a1
-
Size
200KB
-
MD5
7052a62750c257f56ba8060955702f4b
-
SHA1
83a9de029e12da061471c5fa3e0e29c9ef95b411
-
SHA256
df48072a2e8e50b02ed352f69c995ede68ba567fc4f5ba601b6af70bb5efe3a1
-
SHA512
a90ad03c60bf1cf93be076ead8e3eb5de9e3631e1d219e18994d3f2ffcaa09db71827ca2c027dee2d11843b227c119c6e4492b08000725dc8577690cda727036
-
SSDEEP
3072:8R1K1p7CvOqDLJbZIgFAUNG9lEAy7sbqTp2:O1sp291ZIg6CG/bB
Malware Config
Signatures
Files
-
df48072a2e8e50b02ed352f69c995ede68ba567fc4f5ba601b6af70bb5efe3a1.exe windows x86
20371ea941e541d47a41261be75cbcbc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateActCtxA
DeactivateActCtx
ReleaseActCtx
GetProcAddress
LoadLibraryA
SetConsoleCP
SetConsoleOutputCP
LoadLibraryExA
GetVersionExA
LocalFree
lstrcpyW
Sleep
ActivateActCtx
SetConsoleActiveScreenBuffer
LocalAlloc
FreeLibrary
user32
LoadStringA
gdi32
GetClipBox
GetGraphicsMode
advapi32
RegOpenKeyExW
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ