Static task
static1
Behavioral task
behavioral1
Sample
75086f1bdbbc2fc030676cb377b99a60ba6bab84a3a6d7752dd566c68ed2ef85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
75086f1bdbbc2fc030676cb377b99a60ba6bab84a3a6d7752dd566c68ed2ef85.exe
Resource
win10v2004-20221111-en
General
-
Target
75086f1bdbbc2fc030676cb377b99a60ba6bab84a3a6d7752dd566c68ed2ef85
-
Size
784KB
-
MD5
9b863d823829798f8e83f32caba3068a
-
SHA1
327d619d442c37c5ad55b0c01ff68820cda1f193
-
SHA256
75086f1bdbbc2fc030676cb377b99a60ba6bab84a3a6d7752dd566c68ed2ef85
-
SHA512
615cedbed0a6cea099a76e224a161a7ca47340c917c686f53280b76426d7a89ee3d695d921afd7937606f5ccc7333bd0fdfcb973fb6bdd7ecefb566a965d81a7
-
SSDEEP
12288:LARM5ugEprRyNcNWKhuZSS5Yd43bqUn7AEeZH4Js/5kx/R9mMg0zDXSVdiZUTMR:LARMLExESWSuYPdKAZBx29mC3YB
Malware Config
Signatures
Files
-
75086f1bdbbc2fc030676cb377b99a60ba6bab84a3a6d7752dd566c68ed2ef85.exe windows x86
1e693dcdf6eabf7a66873b260b4ce585
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrW
GetPrivateProfileStringA
GetFileTime
CreateEventW
ReleaseMutex
FindClose
GetDriveTypeA
LocalFree
HeapCreate
InitializeCriticalSection
WriteFile
LoadLibraryW
GetCurrentThreadId
CloseHandle
TlsGetValue
ReleaseMutex
lstrlenW
GetEnvironmentVariableW
GlobalFlags
GetCurrentProcessId
user32
IsWindow
GetKeyboardType
GetClientRect
DrawTextA
GetSysColor
GetSysColor
SetFocus
EndDialog
DispatchMessageA
DrawStateW
CallWindowProcW
GetClassInfoA
CreateWindowExA
pnrpnsp
NSPStartup
NSPStartup
NSPStartup
NSPStartup
NSPStartup
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 774KB - Virtual size: 773KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ