Static task
static1
Behavioral task
behavioral1
Sample
c52a0688f86dd5df66b0ecec5edcaae519e5a75663752ddb1753af0084b767b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c52a0688f86dd5df66b0ecec5edcaae519e5a75663752ddb1753af0084b767b5.exe
Resource
win10v2004-20220901-en
General
-
Target
c52a0688f86dd5df66b0ecec5edcaae519e5a75663752ddb1753af0084b767b5
-
Size
194KB
-
MD5
2478fffe9f0ca3f443b90342e471aaf0
-
SHA1
7e918a83973ba687dc5260d01a1a3f77a756880b
-
SHA256
c52a0688f86dd5df66b0ecec5edcaae519e5a75663752ddb1753af0084b767b5
-
SHA512
5e67c0b87882dbc2f17f8a814091530ede2cec967cea5c19fd2f36a52f06a7c5c5fbc344dd027066d6c0e379f98033debf6e28270edd004f9f6cae92919e2cc4
-
SSDEEP
3072:rjCiZFod6SxHY0n5+fDgPzhbdW6gD70vjR89K4X0YPuCFt2E9wl1pstcm/i:C4OdHVY0n5+MzWl704K4X0Yme7g1pY/i
Malware Config
Signatures
Files
-
c52a0688f86dd5df66b0ecec5edcaae519e5a75663752ddb1753af0084b767b5.exe windows x86
7abc96054cadb52b91afbc4d548568d7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
wtsapi32
WTSRegisterSessionNotification
Sections
.MPRESS1 Size: 184KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE