Static task
static1
Behavioral task
behavioral1
Sample
b678a8389afc93a98e4b01507aff798a78180512f40f9468aff9c0ec44ace8b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b678a8389afc93a98e4b01507aff798a78180512f40f9468aff9c0ec44ace8b8.exe
Resource
win10v2004-20220812-en
General
-
Target
b678a8389afc93a98e4b01507aff798a78180512f40f9468aff9c0ec44ace8b8
-
Size
338KB
-
MD5
324dc0e2a49c3e6ab83a074794ba83ef
-
SHA1
12812a017ede6dcbaa8667b7f0acc8633287c560
-
SHA256
b678a8389afc93a98e4b01507aff798a78180512f40f9468aff9c0ec44ace8b8
-
SHA512
40a1a8b2821d7c256209ccaa43ffe4619d9502bb7ec42497f1b531e464216429188795a08fa0ac93e37d4b060961d54c82a1a2de7c6772f8b645fcf829071f3d
-
SSDEEP
6144:YeQcZ/+/8PvKTOXMKS79E9Fm9kMtWuINQW34JfFRVZ5f1C5l1IMi/N0z:jx87TO1S79ETm9zMuI2j5c5l1INqz
Malware Config
Signatures
Files
-
b678a8389afc93a98e4b01507aff798a78180512f40f9468aff9c0ec44ace8b8.exe windows x86
d38cd1c7f1e9c646bc799c8b53e5e5a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtectEx
LocalFree
GetLastError
GlobalUnlock
GetACP
FreeEnvironmentStringsA
FindClose
GetConsoleCP
CreateEventA
IsBadStringPtrA
lstrlenA
IsBadReadPtr
GetSystemTime
GlobalLock
CloseHandle
LoadLibraryExA
GetStdHandle
ResumeThread
OpenMutexA
GetModuleHandleA
user32
CreateWindowExA
IsIconic
ClipCursor
GetSubMenu
EndDialog
RedrawWindow
SetFocus
DialogBoxParamA
IsMenu
GetMessageA
GetDlgItemTextA
GetMessageA
CheckMenuItem
DrawIconEx
wldap32
cldap_open
ldap_unbind
ldap_add
ldap_delete
ldap_compare
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ