Static task
static1
Behavioral task
behavioral1
Sample
8a02fde2171ba912550e32b6678941a222f50e402400222678e2eeb24c041060.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a02fde2171ba912550e32b6678941a222f50e402400222678e2eeb24c041060.exe
Resource
win10v2004-20220812-en
General
-
Target
8a02fde2171ba912550e32b6678941a222f50e402400222678e2eeb24c041060
-
Size
107KB
-
MD5
f37987a93e8badb5df94217b9ae034a2
-
SHA1
261a30f334a504088a081e487514b40f3a6f748e
-
SHA256
8a02fde2171ba912550e32b6678941a222f50e402400222678e2eeb24c041060
-
SHA512
8c14c8787c426a569cfd2d8bc5845adf25deb00537374e2b71f2a1c91c76b352312e5e724328aa60d181b21b55d6070f4599a62358a0032f2473c24222f9a189
-
SSDEEP
3072:cEjheqTayETR+bMkclQ6nekqiX5TPpAoQB/:bjraI9clHn95TPpAoC/
Malware Config
Signatures
Files
-
8a02fde2171ba912550e32b6678941a222f50e402400222678e2eeb24c041060.exe windows x86
db2cbfc0a5b7aecae402373b9e2541ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlAllocateHeap
RtlFreeHeap
RtlImageNtHeader
secur32
AddCredentialsW
version
VerQueryValueW
esent
JetGetAttachInfo
user32
SetThreadDesktop
GetDesktopWindow
SetProcessWindowStation
CloseWindowStation
GetClientRect
GetProcessWindowStation
SetWindowPos
DlgDirListComboBoxW
OpenDesktopW
EnumPropsA
MapWindowPoints
GetWindowRect
SetDlgItemTextW
EndDialog
CloseDesktop
LoadStringW
OpenWindowStationW
kernel32
GetLastError
BackupSeek
VirtualAlloc
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 338KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE