Static task
static1
Behavioral task
behavioral1
Sample
91245d2e096f9e7b0e6541b3bf1e55e47af76a7856566565fcb42ae22ea2f8eb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
91245d2e096f9e7b0e6541b3bf1e55e47af76a7856566565fcb42ae22ea2f8eb.exe
Resource
win10v2004-20220901-en
General
-
Target
91245d2e096f9e7b0e6541b3bf1e55e47af76a7856566565fcb42ae22ea2f8eb
-
Size
27KB
-
MD5
840e25e0cd119aea3e0e0a6b2778622e
-
SHA1
e442ef7548d5a92f5ae3b3c5458972f8c38c0607
-
SHA256
91245d2e096f9e7b0e6541b3bf1e55e47af76a7856566565fcb42ae22ea2f8eb
-
SHA512
9d221b9111f8a7e764343a6d37fb883f6cbf1fae2d74b99dcbf434feaaf9c39786feefa8cb7d5b466baee0413e0626a9f6151b7c2f8f92459158b9a054dc9240
-
SSDEEP
768:MjiL54xlz6JR0sjxfGV7LL2aC3/Vg4Q9J:Mm54xNmfVfGV7LLCrQ9J
Malware Config
Signatures
Files
-
91245d2e096f9e7b0e6541b3bf1e55e47af76a7856566565fcb42ae22ea2f8eb.exe windows x86
e90b673187c6135e0159cdf1920e45f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathQuoteSpacesW
PathFindFileNameW
StrToIntW
StrCmpW
PathAppendW
PathRemoveFileSpecW
dbghelp
MiniDumpWriteDump
MiniDumpReadDumpStream
gdi32
DeleteObject
SetTextColor
SetBkMode
SelectObject
Polyline
GetObjectW
CreatePen
shell32
ExtractIconExW
CommandLineToArgvW
user32
DispatchMessageA
EnumDisplayDevicesW
PeekMessageA
SetClassLongW
CountClipboardFormats
kernel32
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
lstrcpynW
SetEvent
SetLastError
QueryPerformanceCounter
MapViewOfFile
LocalFree
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
InitializeCriticalSection
GlobalFree
GetWindowsDirectoryW
CloseHandle
CreateFileMappingW
CreateFileW
CreateProcessW
CreateThread
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetTempFileNameW
GetTempPathW
GetTickCount
imm32
ImmGetConversionListA
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ