Static task
static1
Behavioral task
behavioral1
Sample
940ae05228715c32941ba047a3c55739d6037834cc8089d7f2d0d924c8c830c0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
940ae05228715c32941ba047a3c55739d6037834cc8089d7f2d0d924c8c830c0.exe
Resource
win10v2004-20220812-en
General
-
Target
940ae05228715c32941ba047a3c55739d6037834cc8089d7f2d0d924c8c830c0
-
Size
223KB
-
MD5
4f1af7e4a9733a966558de8d80b39849
-
SHA1
3dc8cb73118cdfa36489ea12758a16a0da4842cc
-
SHA256
940ae05228715c32941ba047a3c55739d6037834cc8089d7f2d0d924c8c830c0
-
SHA512
54e04e5435bb3eb98500d343e87c06dc9494e2a6aafe1595656a55820e38e10393f2b0fa50654905e82aea9bd62242c7d8a6b7c9ab321aefdb63cb6a6b6e5c2a
-
SSDEEP
6144:L0kL0+DVmfApo1Jg6Z41L28T/Fcy1UyQPC4:Rg+EIpAcZ2gdcuUyP4
Malware Config
Signatures
Files
-
940ae05228715c32941ba047a3c55739d6037834cc8089d7f2d0d924c8c830c0.exe windows x86
c09fc0e2a4825a67bf9aa995a4114719
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptReleaseContext
kernel32
SetEvent
shlwapi
PathCombineW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIA
StrStrW
wnsprintfA
user32
CharLowerBuffA
DispatchMessageA
DrawIcon
EndDialog
FindWindowExA
GetClipboardData
GetCursorPos
GetDlgItem
GetIconInfo
GetWindowTextA
PeekMessageA
SetProcessWindowStation
Sections
.qpyvqz Size: 43KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.elep Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xot Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ