Static task
static1
Behavioral task
behavioral1
Sample
0bdb696ab3d81a68aae86fca8323fc1580aaea694b7daaf476bb1bdfe891ddbb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0bdb696ab3d81a68aae86fca8323fc1580aaea694b7daaf476bb1bdfe891ddbb.exe
Resource
win10v2004-20221111-en
General
-
Target
0bdb696ab3d81a68aae86fca8323fc1580aaea694b7daaf476bb1bdfe891ddbb
-
Size
347KB
-
MD5
d11746161c9c08fdc81a2dc3332a2636
-
SHA1
00277d25522fac732dd87743ff6ca40c9a763159
-
SHA256
0bdb696ab3d81a68aae86fca8323fc1580aaea694b7daaf476bb1bdfe891ddbb
-
SHA512
0691b1b98b30bc196e087ffde238a83b4455dd39f2963aa7118f2614ff935f0718c055f45bcdf79cbe592db87f8885a1be0cd2090ee4e52b96be85e74340902e
-
SSDEEP
6144:gWi68lntYR7d8WY/ZEn6ry83MgQEDz97KsUUHvHgOj8aF/XnGt09BrfTz9dqXWTY:g+8lntYpd5Yy6FcgrEU/gOj8aZGtGBra
Malware Config
Signatures
Files
-
0bdb696ab3d81a68aae86fca8323fc1580aaea694b7daaf476bb1bdfe891ddbb.exe windows x86
795f93e2cdc8ff430e954fe95486dfb3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowTextA
EnumDesktopsA
SetWindowPos
IsCharAlphaNumericW
GetActiveWindow
ValidateRect
DialogBoxParamA
SetPropA
OemKeyScan
ole32
CoAllowSetForegroundWindow
CoFreeLibrary
CoLoadLibrary
OleFlushClipboard
kernel32
GetCurrentProcessId
CopyFileW
CreateProcessW
SizeofResource
HeapFree
GetStartupInfoA
SetFileAttributesA
DeleteAtom
HeapDestroy
LocalAlloc
GlobalMemoryStatus
HeapCreate
InitializeSListHead
AddAtomW
LocalFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetProcAddress
LoadLibraryA
Sections
.text Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ