Static task
static1
Behavioral task
behavioral1
Sample
93c770dbcf805da5a6757465bc0d1548123f3a899bfab29845df2d7ed85c5273.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93c770dbcf805da5a6757465bc0d1548123f3a899bfab29845df2d7ed85c5273.exe
Resource
win10v2004-20221111-en
General
-
Target
93c770dbcf805da5a6757465bc0d1548123f3a899bfab29845df2d7ed85c5273
-
Size
37KB
-
MD5
480d603566b10b80c5b5471c773b333f
-
SHA1
33df0c760ba9fd0b06c7036779fd83a51b5cd0b5
-
SHA256
93c770dbcf805da5a6757465bc0d1548123f3a899bfab29845df2d7ed85c5273
-
SHA512
5d582b63ddcbe94496065ddcad0df6c69bc4e09c10fdb254f6e8ac996759e6e4d3bf0a465d189ecb316d69c2c27b26c947522a46b18f177aea02afcec8945dfe
-
SSDEEP
768:Jsk5E+XvvE0Bs7cYhiFw8ih4jSFcVH7564/aT:+g3Ecf2ph4jSSHl64/
Malware Config
Signatures
Files
-
93c770dbcf805da5a6757465bc0d1548123f3a899bfab29845df2d7ed85c5273.exe windows x86
afd629a51f493fe9f48585e4487eab8d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
regapi
RegUserConfigQuery
RegUserConfigSet
user32
LoadStringW
netapi32
NetGetDCName
ntdll
wcstol
wcsncpy
wcstoul
wcscmp
wcscat
_ultoa
wcschr
wcslen
wcscpy
memmove
_wcslwr
_wcsnicmp
msvcrt
_exit
_XcptFilter
_cexit
exit
fwprintf
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_c_exit
_except_handler3
vswprintf
vfwprintf
free
malloc
_iob
fprintf
setlocale
_wcsdup
_controlfp
__initenv
kernel32
FindFirstFileW
GetModuleHandleA
FormatMessageW
FindNextFileW
GetFileAttributesW
GetCommandLineW
LocalAlloc
LocalFree
GetModuleHandleW
MultiByteToWideChar
GetStdHandle
GetFileType
WriteConsoleW
SetLastError
LoadLibraryW
GetLastError
FreeLibrary
Sections
_kelly_ Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ