Static task
static1
Behavioral task
behavioral1
Sample
895c6fa41f6afa346a876b64972b78919328f947eb9211ef26c0c5c6c8edb3eb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
895c6fa41f6afa346a876b64972b78919328f947eb9211ef26c0c5c6c8edb3eb.exe
Resource
win10v2004-20221111-en
General
-
Target
895c6fa41f6afa346a876b64972b78919328f947eb9211ef26c0c5c6c8edb3eb
-
Size
218KB
-
MD5
f5e2be266413ea82e6e111f603557bd0
-
SHA1
c91ad96b5576c5c877a11068b6165297f992f09f
-
SHA256
895c6fa41f6afa346a876b64972b78919328f947eb9211ef26c0c5c6c8edb3eb
-
SHA512
2cd5c762562da0c13060374a3202ebf34cc6f13b847dec56bfb8130087be3db859609dc46e57a4f27e1ed3fd1087e73f3d39a6174f1b8ad09552d37fd8d4fb95
-
SSDEEP
3072:C3uqimKeXR+Fm+jmWZWDZtgklx7HqcRZBFmSu/rcZsEmr60uvm1lq50BXg:C7imN+lj/MtlQcXBFKx60uGlq5+g
Malware Config
Signatures
Files
-
895c6fa41f6afa346a876b64972b78919328f947eb9211ef26c0c5c6c8edb3eb.exe windows x86
9bda5e3ee8bba70e3939c058ae738d31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
OpenWindowStationA
GetWindowLongA
SendMessageA
ExitWindowsEx
SetThreadDesktop
GetWindowThreadProcessId
MsgWaitForMultipleObjects
CloseWindowStation
CloseDesktop
DispatchMessageA
kernel32
CreateFileA
VirtualAlloc
GetTickCount
ResetEvent
GetModuleHandleA
GetSystemTime
GetProcAddress
HeapReAlloc
GlobalUnlock
VirtualProtect
advapi32
CryptCreateHash
GetUserNameW
CryptGetHashParam
CryptHashData
RegCreateKeyExA
shlwapi
wnsprintfW
StrStrW
PathFileExistsW
wnsprintfA
StrCmpNIW
PathFindFileNameW
StrCmpNIA
wvnsprintfA
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE