?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
c294f457c11801561c3f0cefa897fa2906668cad9d2cda4ff0913cc912511976.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c294f457c11801561c3f0cefa897fa2906668cad9d2cda4ff0913cc912511976.exe
Resource
win10v2004-20220812-en
General
-
Target
c294f457c11801561c3f0cefa897fa2906668cad9d2cda4ff0913cc912511976
-
Size
162KB
-
MD5
c137e0d3742516d2370d2bb2333cb87d
-
SHA1
8eb15d77df3c54cd960d7f1c33b91f04e4a41152
-
SHA256
c294f457c11801561c3f0cefa897fa2906668cad9d2cda4ff0913cc912511976
-
SHA512
3542e691cc0bdad1443766e92f50761e65fba6c1c24338a22822682cf2c522ad749d0b5676735245fbd08c5a834f18facc23268b29cb917a4a0ecc9039bb041c
-
SSDEEP
3072:+gBDha3NvOUCUP+RcwMZkwlAjTEAllhv9lsNBtKoHo562JeZXCkBNphnXCWqdF:+gB1a3NvOUCG+2ZgjTEA19YOQoM2Jcns
Malware Config
Signatures
Files
-
c294f457c11801561c3f0cefa897fa2906668cad9d2cda4ff0913cc912511976.exe windows x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ