Static task
static1
Behavioral task
behavioral1
Sample
bad391f26eb2d225637219ef1e62cd7361ccdcde1ce28204ff8b6d5f819a907e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bad391f26eb2d225637219ef1e62cd7361ccdcde1ce28204ff8b6d5f819a907e.exe
Resource
win10v2004-20221111-en
General
-
Target
bad391f26eb2d225637219ef1e62cd7361ccdcde1ce28204ff8b6d5f819a907e
-
Size
238KB
-
MD5
6b516206cd9fb88bea7a39c8f4d70a40
-
SHA1
621075a29faaa4f1f32a11fff6f1b81db032c56c
-
SHA256
bad391f26eb2d225637219ef1e62cd7361ccdcde1ce28204ff8b6d5f819a907e
-
SHA512
d6f4b0f8f145046cb2cd96cd8773feb5d03b065476817d5eeb035d80348579c19d3fc19d996eee18514e144d2aa1427344a48de9012af81469c35a19a49aa556
-
SSDEEP
3072:pIXDD8Ww7GtCmjXko/6AYetjrhgL4qae8DlU7h3UEJncJ6axFoeQ6nfjgVQC:q4GtCK99Jp2ae8DiBTtcJBXfjb
Malware Config
Signatures
Files
-
bad391f26eb2d225637219ef1e62cd7361ccdcde1ce28204ff8b6d5f819a907e.exe windows x86
28d3f0f264ef7a103f2570959f2a35df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
TerminateProcess
GetProcAddress
LoadLibraryA
lstrcmpiW
OutputDebugStringA
lstrcpyA
GetModuleHandleW
GetStartupInfoW
user32
DispatchMessageW
GetMessageA
TranslateMessage
OpenClipboard
GetActiveWindow
FindWindowA
powrprof
CanUserWritePwrScheme
wintrust
WinVerifyTrust
ntdll
DbgPrint
msvcrt
_initterm
_adjust_fdiv
__setusermatherr
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
__p__fmode
_controlfp
_except_handler3
__set_app_type
__p__commode
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE