Static task
static1
Behavioral task
behavioral1
Sample
92a893ebdfc8d657ba671ee0bdf85f7615f425a3d692588fe08088ddaef3ec87.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92a893ebdfc8d657ba671ee0bdf85f7615f425a3d692588fe08088ddaef3ec87.exe
Resource
win10v2004-20221111-en
General
-
Target
92a893ebdfc8d657ba671ee0bdf85f7615f425a3d692588fe08088ddaef3ec87
-
Size
370KB
-
MD5
45828698b84e50c8b95e980296301844
-
SHA1
4a7ec115103d6a1768e77a206a0b27ceb8f75d92
-
SHA256
92a893ebdfc8d657ba671ee0bdf85f7615f425a3d692588fe08088ddaef3ec87
-
SHA512
50f6caa0879a5e64108199667a6763c5b5d4e5c5d28245e23f471d3c412cd960b81dbd4270020fcbb2d643350edfcbb61d29c5aafc4e4a970d579f797bb5ab0c
-
SSDEEP
6144:whRM0t0HEAT1fxhcMxW2pL7lv6w2K/PkFtR6sFHYnHFWhTyHVEOSQTQiJY7jM56g:whRMpHEAJLjpFv6w2K/PkFtlVMHFWg10
Malware Config
Signatures
Files
-
92a893ebdfc8d657ba671ee0bdf85f7615f425a3d692588fe08088ddaef3ec87.exe windows x86
ff4594908e0c55b45ed478e66597811a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
FindAtomA
GetEnvironmentVariableW
ReleaseMutex
GetCurrentThreadId
LocalFree
InitializeCriticalSection
CreateEventW
IsBadStringPtrW
WriteFile
GlobalFlags
HeapCreate
GetCurrentProcessId
GetDriveTypeA
ReleaseMutex
GetFileTime
lstrlenW
GetPrivateProfileStringA
FindClose
LoadLibraryW
user32
DrawTextA
SetFocus
CreateWindowExA
GetClassInfoA
IsWindow
GetKeyboardType
DrawStateW
GetClientRect
DispatchMessageA
GetSysColor
EndDialog
GetSysColor
CallWindowProcW
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
cryptui
LocalEnroll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ