Static task
static1
Behavioral task
behavioral1
Sample
95497cc081770f0785df7d4e799cbf1999e06525d9c6de3286c557cdf0fb5975.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95497cc081770f0785df7d4e799cbf1999e06525d9c6de3286c557cdf0fb5975.exe
Resource
win10v2004-20220812-en
General
-
Target
95497cc081770f0785df7d4e799cbf1999e06525d9c6de3286c557cdf0fb5975
-
Size
391KB
-
MD5
58170d2a27c1c9a7f11820dda7fdf863
-
SHA1
1590d8bd9996fc14c6ace5737098eaf4855931cc
-
SHA256
95497cc081770f0785df7d4e799cbf1999e06525d9c6de3286c557cdf0fb5975
-
SHA512
1f3cdf6fdc4cf1573978f227c3108a987755e3e6920b8f8e11e0f0fd4cd6dfd035290f4730e792f369675a3a63967cfc2c1df4e61481ee993b2df7f24cb96a63
-
SSDEEP
12288:hGI3RM3HEAJLjpFv6w2K/PkFtlVMHFWg1EOfoMzCc3Sa0n:t3RM3kAJLjpFvN/ytkjEOfoMWN
Malware Config
Signatures
Files
-
95497cc081770f0785df7d4e799cbf1999e06525d9c6de3286c557cdf0fb5975.exe windows x86
5ff9834c1787cd98ae0f414d5b68fd70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
GetDriveTypeA
LocalFree
TlsGetValue
HeapCreate
GetEnvironmentVariableW
IsBadStringPtrW
InitializeCriticalSection
LoadLibraryW
GetCurrentThreadId
ReleaseMutex
GlobalFlags
lstrlenW
ReleaseMutex
GetCurrentProcessId
CreateEventW
GetPrivateProfileStringA
CloseHandle
FindClose
WriteFile
user32
DrawStateW
DrawTextA
GetClientRect
CallWindowProcW
GetSysColor
GetSysColor
EndDialog
GetClassInfoA
CreateWindowExA
IsWindow
GetKeyboardType
SetFocus
DispatchMessageA
qcliprov
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ