Static task
static1
Behavioral task
behavioral1
Sample
90ce159ce07803a07dda3e743b2f64cba38dda7ccc5068b3c3115b4a051365b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90ce159ce07803a07dda3e743b2f64cba38dda7ccc5068b3c3115b4a051365b9.exe
Resource
win10v2004-20220812-en
General
-
Target
90ce159ce07803a07dda3e743b2f64cba38dda7ccc5068b3c3115b4a051365b9
-
Size
85KB
-
MD5
aab8cb2db61c76c6fc66d0499ab2c921
-
SHA1
629b38ef163efa3968a6132e189e633f65aea000
-
SHA256
90ce159ce07803a07dda3e743b2f64cba38dda7ccc5068b3c3115b4a051365b9
-
SHA512
e7efa4b6f3567a6aca1ed3d6de5cf7d011ef44f457264852c836ef9b71fab007753a3c1e0f2c3a0cc5265718969d63ef7604e2d5d5220c60813f81e3dbb4d1ba
-
SSDEEP
1536:lc3pw/WgW+GwLK/1febjh+SDCkPVoWbKs6LLcpSZ6cvX+7BSXC4owpv:y36/WgW+GwLK14l+SDPGKKskcpghaQtD
Malware Config
Signatures
Files
-
90ce159ce07803a07dda3e743b2f64cba38dda7ccc5068b3c3115b4a051365b9.exe windows x86
8517ebad3f2d51ffd29a2dc11addc1d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
TlsGetValue
FindAtomA
FindClose
CreateFileMappingA
LocalFree
GlobalUnlock
LoadLibraryExA
CloseHandle
GetCalendarInfoA
GetModuleHandleA
HeapCreate
LocalLock
GetConsoleAliasA
CreateFileA
GetLastError
GetConsoleCP
GetACP
WaitForMultipleObjects
FreeEnvironmentStringsA
user32
CascadeWindows
SetFocus
DefWindowProcA
GetDC
GetIconInfo
CallWindowProcA
DispatchMessageA
IsWindow
GetMessageA
DrawTextA
CreateDialogParamA
GetDlgItem
DrawEdge
MessageBoxA
msasn1
ASN1BERDecNull
ASN1BERDecSkip
ASN1BERDecEoid
ASN1BEREncLength
ASN1BERDecCheck
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ