Static task
static1
Behavioral task
behavioral1
Sample
942bf005b5dd1a9ebbc69ff6116cc75c144586decb02b359774370347855f709.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
942bf005b5dd1a9ebbc69ff6116cc75c144586decb02b359774370347855f709.exe
Resource
win10v2004-20220901-en
General
-
Target
942bf005b5dd1a9ebbc69ff6116cc75c144586decb02b359774370347855f709
-
Size
247KB
-
MD5
2ba16427241e11c002bd0a637cd4cf4d
-
SHA1
5ba570880933586154c601902dda2b3d1d0ff524
-
SHA256
942bf005b5dd1a9ebbc69ff6116cc75c144586decb02b359774370347855f709
-
SHA512
fb4842d2a2ceb9fa8abe1d80a794471bebc7febff9b6a45761c9103ef6ad3d2ea77974f4c5ba117b568527753350d0e8d1742d55b184a048b88ec51099a3c0ee
-
SSDEEP
6144:cD6ISBhpwLTKJ2bodsCU+PR/E+AvdTGMUce4nz8Zg/YV:ktip9YbKsC/5/E+AvdiPce44eY
Malware Config
Signatures
Files
-
942bf005b5dd1a9ebbc69ff6116cc75c144586decb02b359774370347855f709.exe windows x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 129KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
musu25qg Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a0hk.gdt Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
99in.kks Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n0qprvf5 Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i1s.3c3v Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ