Static task
static1
Behavioral task
behavioral1
Sample
93476d7ec0a4d732f361e00ab99f0ef47ba1aab0e196f35af4b35102a9076713.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93476d7ec0a4d732f361e00ab99f0ef47ba1aab0e196f35af4b35102a9076713.exe
Resource
win10v2004-20221111-en
General
-
Target
93476d7ec0a4d732f361e00ab99f0ef47ba1aab0e196f35af4b35102a9076713
-
Size
446KB
-
MD5
0c7298beb7bf9049369768b8c94e9367
-
SHA1
ab17d5c3e133191321347e099904a783b0b60f87
-
SHA256
93476d7ec0a4d732f361e00ab99f0ef47ba1aab0e196f35af4b35102a9076713
-
SHA512
4c0e8b05c6479e09bbec4aedbc52078167fb86f6341e3ac10fc1a279ecdef377a233f2291a8bc83ede5603c769375ad89f920a2196ad615c2b6ddec91f274668
-
SSDEEP
12288:xRMmHEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0nreZrDc:xRMmkAJLjpFvN/ytkjEOfoMWNkDc
Malware Config
Signatures
Files
-
93476d7ec0a4d732f361e00ab99f0ef47ba1aab0e196f35af4b35102a9076713.exe windows x86
31f579bb8aa0dc574fab8f4aa02dcbee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
TlsGetValue
WriteFile
lstrlenW
GetPrivateProfileStringA
IsBadStringPtrW
GetCurrentProcessId
ReleaseMutex
LoadLibraryW
FindClose
GetCurrentThreadId
LocalFree
GetFileTime
GlobalFlags
GetDriveTypeA
HeapCreate
ReleaseMutex
InitializeCriticalSection
GetEnvironmentVariableW
FindAtomA
user32
GetClientRect
GetClassInfoA
IsWindow
GetSysColor
CallWindowProcW
GetSysColor
GetKeyboardType
DrawTextA
DrawStateW
DispatchMessageA
EndDialog
CreateWindowExA
SetFocus
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
cryptui
LocalEnroll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.7rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE