Static task
static1
Behavioral task
behavioral1
Sample
94cde2a4da4cd238c0d6ec670d25086b44b7896a9c9ae5ee722663473edc7579.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
94cde2a4da4cd238c0d6ec670d25086b44b7896a9c9ae5ee722663473edc7579.exe
Resource
win10v2004-20220901-en
General
-
Target
94cde2a4da4cd238c0d6ec670d25086b44b7896a9c9ae5ee722663473edc7579
-
Size
536KB
-
MD5
63fa47a3d1f90f164a9e2fd0c030866d
-
SHA1
8f6c8d9b8764f1a492038f115ce449750d76c06a
-
SHA256
94cde2a4da4cd238c0d6ec670d25086b44b7896a9c9ae5ee722663473edc7579
-
SHA512
38e252c643a92899e8513b2dc7a2fd3ce64c480dc2da1003e53e7457e58e28b50930deaa75da087545a711223aedd9809763dfe34eec3f92d9d9c89f02b0588f
-
SSDEEP
12288:RfpOq4V0puvt8k7kEjINM10JDx5+sh8dJSJt:lpOXVfvm2aAKDx5fh8d
Malware Config
Signatures
Files
-
94cde2a4da4cd238c0d6ec670d25086b44b7896a9c9ae5ee722663473edc7579.exe windows x86
4b561be4c77fd92080c9bd910f0b45fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
CloseHandle
DeviceIoControl
GetConsoleAliasW
GetStartupInfoA
lstrlenA
DeleteFileA
CloseHandle
GetModuleFileNameW
GetModuleHandleA
HeapCreate
IsDebuggerPresent
GetFileTime
GetCommandLineA
Sleep
CreateFileW
GetDriveTypeW
LocalFlags
FindClose
LocalSize
user32
DispatchMessageA
DestroyWindow
DestroyMenu
IsZoomed
GetWindowLongA
DispatchMessageA
DrawTextW
LoadImageA
BeginPaint
PeekMessageA
CallWindowProcW
GetIconInfo
IsWindow
dmcompos
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
rasapi32
DwCloneEntry
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ