?GetUserObjectSecurityGetUserObjectSecu
Static task
static1
Behavioral task
behavioral1
Sample
1ea31de0669d1ef566d5a6020199907e6d9c0d187cab571b5509305b5bc68258.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ea31de0669d1ef566d5a6020199907e6d9c0d187cab571b5509305b5bc68258.exe
Resource
win10v2004-20221111-en
General
-
Target
1ea31de0669d1ef566d5a6020199907e6d9c0d187cab571b5509305b5bc68258
-
Size
170KB
-
MD5
83445280a37a8d2e6c161f271acbf999
-
SHA1
2380fc00911d98d89b2e120eacc2e462ba25a4ec
-
SHA256
1ea31de0669d1ef566d5a6020199907e6d9c0d187cab571b5509305b5bc68258
-
SHA512
fc9bc9b107f11103f991c9ce351033b2da1804326504bed6e57d4a3dc265b1eb06ec615339f8af22524d416b3aa0efca0e8fcdbcb7c9c1d40b7343004a171bf1
-
SSDEEP
3072:AWsOOdkniVt7195XVwH9BfGbCFJzYRwXP72kkuWyKX3JtAObg+:AWv8kniL71hotQCFJsRw/72ktEXg
Malware Config
Signatures
Files
-
1ea31de0669d1ef566d5a6020199907e6d9c0d187cab571b5509305b5bc68258.exe windows x86
d40bba3700a28ce7e318e2630daedbae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckMenuItem
kernel32
SetErrorMode
CreateEventA
lstrlenW
LockResource
FileTimeToSystemTime
GetProcessShutdownParameters
CreateFileMappingA
AreFileApisANSI
GetBinaryTypeW
LoadLibraryA
FlushFileBuffers
OpenFileMappingA
IsBadStringPtrA
DefineDosDeviceW
GetCommandLineW
GetAtomNameW
OpenFileMappingW
Exports
Exports
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wrew Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.werty Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hfgg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rertyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iuyyt Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ