Static task
static1
Behavioral task
behavioral1
Sample
146c113dd75c18d61cae0895f9afe81987e5e552dfed653010ff8a87c46ecf2e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
146c113dd75c18d61cae0895f9afe81987e5e552dfed653010ff8a87c46ecf2e.exe
Resource
win10v2004-20220812-en
General
-
Target
146c113dd75c18d61cae0895f9afe81987e5e552dfed653010ff8a87c46ecf2e
-
Size
15KB
-
MD5
868a9a763b49b4c92ffbe76d5e17b501
-
SHA1
fa3da922f2ec1096b2d77df886f783c1c6a93301
-
SHA256
146c113dd75c18d61cae0895f9afe81987e5e552dfed653010ff8a87c46ecf2e
-
SHA512
725d7473250a4bd87c981ab7529c377e98b99ed36df2fc2649c4c2ab8a32e0c58dc03d3f7350ef81258d33d6495b16c4ca25021e7987205eb38a4127dfde3027
-
SSDEEP
384:nYRq2cZsjE1XIJ0NppznwGvn3OXpWzZWj:idJgfdTPn0
Malware Config
Signatures
Files
-
146c113dd75c18d61cae0895f9afe81987e5e552dfed653010ff8a87c46ecf2e.exe windows x86
af2319de2a9dfc39af823ce7163bf740
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winsta
LogonIdFromWinStationNameW
WinStationReset
WinStationNameFromLogonIdW
WinStationOpenServerW
WinStationQueryInformationW
user32
LoadStringW
ntdll
_wcslwr
memmove
_wcsnicmp
wcscmp
VerSetConditionMask
wcsncpy
wcstol
wcscat
_ultoa
wcschr
wcscpy
wcslen
iswctype
wcstoul
msvcrt
free
vfwprintf
vswprintf
fwprintf
_wcsdup
_c_exit
_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
malloc
fprintf
setlocale
_iob
fgetwc
_exit
kernel32
lstrlenW
GetLastError
FreeLibrary
LoadLibraryW
SetLastError
WriteConsoleW
GetModuleHandleA
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetCommandLineW
LocalAlloc
LocalFree
VerifyVersionInfoW
FormatMessageW
GetModuleHandleW
MultiByteToWideChar
GetStdHandle
GetFileType
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ