Static task
static1
Behavioral task
behavioral1
Sample
967656a6aeb0782272ba777656e456ecce639d06db1c9a9c1d83b465d1919487.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
967656a6aeb0782272ba777656e456ecce639d06db1c9a9c1d83b465d1919487.exe
Resource
win10v2004-20221111-en
General
-
Target
967656a6aeb0782272ba777656e456ecce639d06db1c9a9c1d83b465d1919487
-
Size
312KB
-
MD5
a8cb935cb8f64348f4286ab74d837a63
-
SHA1
8e270daab31b1028bf80a4091a4f48d165820a32
-
SHA256
967656a6aeb0782272ba777656e456ecce639d06db1c9a9c1d83b465d1919487
-
SHA512
a09f5af752bdab86b97d3456330d3b246d138177e9bc3e6405e0ed7f0e143bc554334c2d6a45c23240ee704e991761f0762c08d529cab80aa10534a6e1dcbdd6
-
SSDEEP
6144:0Ybn8YMs5a8nqK7eEvRoOY5Oka6Q2iH0699R2rF531xjk:0On8FK7eEvyOY8kb/c4p91K
Malware Config
Signatures
Files
-
967656a6aeb0782272ba777656e456ecce639d06db1c9a9c1d83b465d1919487.exe windows x86
d23bfd19c5ae2ca3b4345ef4f47b4609
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GlobalFindAtomA
GetThreadLocale
GetVolumeInformationA
TlsFree
GetStdHandle
GetUserDefaultLangID
GetConsoleCP
GetOEMCP
TlsGetValue
CreateMutexA
GetExitCodeThread
CompareStringA
IsDBCSLeadByte
VirtualAlloc
SetEvent
GetPriorityClass
CreatePipe
CreateThread
GetProcessHeap
GetModuleHandleA
user32
GetWindow
IsWindowVisible
ShowWindow
GetClassNameA
GetClassInfoExA
GetFocus
IsIconic
GetSystemMetrics
GetActiveWindow
GetForegroundWindow
GetDC
RegisterClassA
ValidateRect
GetWindowTextA
ReleaseDC
GetWindowTextLengthA
InvalidateRect
CloseWindow
ReleaseDC
shell32
SHGetFileInfoA
SHGetFolderPathA
SHBrowseForFolderA
SHChangeNotify
SHCreateShellItem
ntdsapi
DsBindA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ