Static task
static1
Behavioral task
behavioral1
Sample
56d11c7f459bb63cd7f5f3d4b0754c38c394afe1da3da8c6c130bd77baed4aac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56d11c7f459bb63cd7f5f3d4b0754c38c394afe1da3da8c6c130bd77baed4aac.exe
Resource
win10v2004-20220812-en
General
-
Target
56d11c7f459bb63cd7f5f3d4b0754c38c394afe1da3da8c6c130bd77baed4aac
-
Size
62KB
-
MD5
0f07cf3df426726f8f12516cac54906e
-
SHA1
df4b4354b8c966e1b04c823976a30c4676ef08df
-
SHA256
56d11c7f459bb63cd7f5f3d4b0754c38c394afe1da3da8c6c130bd77baed4aac
-
SHA512
45347d9148170b920c9839f725456c4cfd1e79a463b7ad68b5392a6e63de81b39f7ccb36589d7502c437e877f3e77526522d1a7d9799e155d69b3ef460602ce6
-
SSDEEP
1536:H/vWnSH0BfJWFDzEkUN40fa0IPY57hsyb/OCMVIDO:H7caDi/ypA57hsyTOZVI
Malware Config
Signatures
Files
-
56d11c7f459bb63cd7f5f3d4b0754c38c394afe1da3da8c6c130bd77baed4aac.exe windows x86
1fc46653ef5cf2a8258b5eb17198962c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCombineW
wnsprintfA
wvnsprintfW
StrStrW
StrCmpNIA
PathFindFileNameW
kernel32
LeaveCriticalSection
GetModuleHandleA
CreateFileA
VirtualProtect
lstrcatA
lstrcpynW
VirtualAlloc
TryEnterCriticalSection
lstrcpyA
UnmapViewOfFile
GetFileTime
HeapAlloc
GetLastError
advapi32
RegDeleteValueA
CryptDestroyHash
GetUserNameW
user32
GetClipboardData
GetKeyboardState
GetDlgItemTextA
CloseDesktop
GetWindowThreadProcessId
GetCursorPos
GetKeyState
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 65B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 261B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE