Static task
static1
Behavioral task
behavioral1
Sample
1bc9a3f5fb491dde12251667c2c71a7d526642bdd9cab6c1e0bfdc5add4ee015.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1bc9a3f5fb491dde12251667c2c71a7d526642bdd9cab6c1e0bfdc5add4ee015.exe
Resource
win10v2004-20220901-en
General
-
Target
1bc9a3f5fb491dde12251667c2c71a7d526642bdd9cab6c1e0bfdc5add4ee015
-
Size
720KB
-
MD5
d2a28493935eb59353e9e04e0f2f0c8a
-
SHA1
2799edbe0ad5f2e47f23c332bc7e25e2ee057ec8
-
SHA256
1bc9a3f5fb491dde12251667c2c71a7d526642bdd9cab6c1e0bfdc5add4ee015
-
SHA512
7b30b3f70d05c597d8547b636eabaf6c1b7fae24c82cc2e54329f54756cb0b249963994110a964d32ac68914f0a233ee6106984670519c63aa3826e0dc9ba82d
-
SSDEEP
12288:vobXKdOeVz5CgOJD7Cmnr1khHCt3S64QRsMopw41:oYV8gOZ7xrKBCt3bwl
Malware Config
Signatures
Files
-
1bc9a3f5fb491dde12251667c2c71a7d526642bdd9cab6c1e0bfdc5add4ee015.exe windows x86
2b89ab14a620da82cbebad36c6d66bc7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
LoadLibraryW
Sleep
CreateFileA
GetProcAddress
lstrlenW
GetModuleHandleW
VirtualAlloc
GetModuleHandleA
GetTickCount
FreeLibrary
user32
LoadIconW
advapi32
RegQueryValueExA
RegOpenKeyA
Sections
.text1 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ