Static task
static1
Behavioral task
behavioral1
Sample
93f4e60c58131b35cf3f22cc460ebb90e0b144da055f5c1196aee307c701e3cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93f4e60c58131b35cf3f22cc460ebb90e0b144da055f5c1196aee307c701e3cd.exe
Resource
win10v2004-20220812-en
General
-
Target
93f4e60c58131b35cf3f22cc460ebb90e0b144da055f5c1196aee307c701e3cd
-
Size
305KB
-
MD5
4fae819fc0db5c9f0e579c60596d2a3e
-
SHA1
4a272d27b3c78715ba0341fbb7cf79b63454dcf7
-
SHA256
93f4e60c58131b35cf3f22cc460ebb90e0b144da055f5c1196aee307c701e3cd
-
SHA512
a08da817f8dc3c6da17390842bf7832ae9859132e2922623edf109f47a63f664a815f97713a1b0254103ff2eb1b6815d68aa51b3cd9f5ef350a5c450032b3999
-
SSDEEP
6144:wXJ48QRNfElxMMpxxwu+Nl/Xaezr+TxKNvWpNB2f+EKMtyA59anI3+UgXZY59ZFx:MbuJqfxwuSXaencxoWDof+EK9AS4+UgK
Malware Config
Signatures
Files
-
93f4e60c58131b35cf3f22cc460ebb90e0b144da055f5c1196aee307c701e3cd.exe windows x86
ca2d10464d5baceec017e33f2b1ad42f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
ReleaseMutex
HeapCreate
LocalFree
FindClose
FindAtomA
GetFileTime
GetEnvironmentVariableW
GetCurrentThreadId
lstrlenW
CreateEventW
LoadLibraryW
ReleaseMutex
GetDriveTypeA
GetCurrentProcessId
WriteFile
GlobalFlags
IsBadStringPtrW
InitializeCriticalSection
GetPrivateProfileStringA
user32
GetKeyboardType
GetClientRect
CreateWindowExA
DrawStateW
CallWindowProcW
GetSysColor
DispatchMessageA
DrawTextA
GetClassInfoA
IsWindow
GetSysColor
SetFocus
EndDialog
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
cryptui
LocalEnroll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ