Static task
static1
Behavioral task
behavioral1
Sample
894dcc4547af8e386f16aba84a657e701c0b360c23e6aced94a8fe825299605f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
894dcc4547af8e386f16aba84a657e701c0b360c23e6aced94a8fe825299605f.exe
Resource
win10v2004-20221111-en
General
-
Target
894dcc4547af8e386f16aba84a657e701c0b360c23e6aced94a8fe825299605f
-
Size
804KB
-
MD5
c38cd291b3868a6e0fbd42333e516d00
-
SHA1
49e82baf0965df3b148b34364ea30db8dea4636e
-
SHA256
894dcc4547af8e386f16aba84a657e701c0b360c23e6aced94a8fe825299605f
-
SHA512
80117322296f39938e6e8fb2aa817d4f77c93b6b309a31036466bf72c755fde3c794d6f2db23ed51644b6480788637ca1c9015ab64a3a14fbe36e0428dd8f5a9
-
SSDEEP
24576:A7Qy+BLeoUhc7/g8REmEfU1zb7Mpur5lOXb77YKD7ptH:s+NeoU2YmTf7MG5G/Y2Vt
Malware Config
Signatures
Files
-
894dcc4547af8e386f16aba84a657e701c0b360c23e6aced94a8fe825299605f.exe windows x86
15066209072a528fb5f065cd4f374312
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winmm
mmioClose
mmioOpenA
kernel32
VirtualAlloc
LoadLibraryA
GetProcAddress
user32
GetMessageW
advapi32
InitializeSid
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 791KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ