Static task
static1
Behavioral task
behavioral1
Sample
95fbdb3b5cb12ebacdfaad7328abdeccacd021133544351396f747165aac069c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95fbdb3b5cb12ebacdfaad7328abdeccacd021133544351396f747165aac069c.exe
Resource
win10v2004-20220901-en
General
-
Target
95fbdb3b5cb12ebacdfaad7328abdeccacd021133544351396f747165aac069c
-
Size
370KB
-
MD5
c696357c86187613371391b7ebaa44b5
-
SHA1
0c5119146f839764b134e9b58a99c890f16e3827
-
SHA256
95fbdb3b5cb12ebacdfaad7328abdeccacd021133544351396f747165aac069c
-
SHA512
2b02648b2c32c7d921f534d661652a3e3d09f54c1cd64739d326dad010779e98cce795c35d3da49d4dc8063886ef522fdbdd2a0e2d6253dcd0c23f9dd9379b39
-
SSDEEP
6144:9k9kmoMOXSyHyC3jRSaZjmi/KaeF/ae/X7FwHqYLAzB0ZN:6am8XVHjNSaZy0KaA/auX0h4CZN
Malware Config
Signatures
Files
-
95fbdb3b5cb12ebacdfaad7328abdeccacd021133544351396f747165aac069c.exe windows x86
22b0a49b61bbe1a42486d70c5e3c5a3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
CreateFileA
GlobalUnlock
CloseHandle
SetLastError
LoadLibraryExW
DeleteAtom
HeapCreate
GlobalFree
CreateMutexA
GetExitCodeProcess
GetVersion
GetStdHandle
VirtualQuery
GetModuleHandleA
lstrlenW
FindResourceA
TlsGetValue
ReleaseMutex
SetEnvironmentVariableA
user32
IsWindow
DrawEdge
CheckRadioButton
GetDlgItem
DrawMenuBar
CreateMenu
CreateWindowExA
GetDC
CallWindowProcA
SetFocus
GetIconInfo
FillRect
DispatchMessageA
ntshrui
GetLocalPathFromNetResourceA
IsPathSharedA
SetFolderPermissionsForSharing
IsPathSharedW
GetNetResourceFromLocalPathA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ