?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
c870fae2228f4fcab0ace89826026dcf4e55dea6753a01b0be28ba545e0d797c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c870fae2228f4fcab0ace89826026dcf4e55dea6753a01b0be28ba545e0d797c.exe
Resource
win10v2004-20220901-en
General
-
Target
c870fae2228f4fcab0ace89826026dcf4e55dea6753a01b0be28ba545e0d797c
-
Size
171KB
-
MD5
e29140365c9539984fcc097c4bf4ada8
-
SHA1
eb24e917464f51e3516261dd8c249bb9d5075132
-
SHA256
c870fae2228f4fcab0ace89826026dcf4e55dea6753a01b0be28ba545e0d797c
-
SHA512
d623976b115f417142fec85e04b8f165c0a817f52a0e2a35a5e25a3470ecb7121095856e8cd16b6f88c7f7e576a5819e63c0ccf46f0c5bd829b030c5614530b2
-
SSDEEP
3072:Ox6gJsanSNTLN7la172/dsp+fyQXcGNBtKoKXYYWamYRAh6jzxXx3IynOJ1boCdc:/g7SNTLF8172/KulO4YaYRSAn3I91bq
Malware Config
Signatures
Files
-
c870fae2228f4fcab0ace89826026dcf4e55dea6753a01b0be28ba545e0d797c.exe windows x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ