Static task
static1
Behavioral task
behavioral1
Sample
d03a881075d05dfb5da09f067522142fd39c178077fefb5344b1f9fd97a1606a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d03a881075d05dfb5da09f067522142fd39c178077fefb5344b1f9fd97a1606a.exe
Resource
win10v2004-20221111-en
General
-
Target
d03a881075d05dfb5da09f067522142fd39c178077fefb5344b1f9fd97a1606a
-
Size
419KB
-
MD5
7768863d40fc206cbe3a8dd8504e54f4
-
SHA1
a0b5b9398c438c736569f2b964630d246c810f00
-
SHA256
d03a881075d05dfb5da09f067522142fd39c178077fefb5344b1f9fd97a1606a
-
SHA512
792e81afc78728bf67b179b9bec0a1d9792b8ee974867a29b5b09f68781a3e5100c061363b1484113a103e4259f6afb5a9ccf120bb93a9f6b2d423aa60529d63
-
SSDEEP
12288:g1gbtVm50rz0APB16PwIVNrCg3uGs4a6ey:g1gFTvSfGGqx
Malware Config
Signatures
Files
-
d03a881075d05dfb5da09f067522142fd39c178077fefb5344b1f9fd97a1606a.exe windows x86
609a8e85b95dd809ae5c04fd0c112bc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
GetWindowThreadProcessId
ShowWindow
FindWindowA
ShowWindowAsync
GetDlgItemTextA
SetDlgItemInt
GetDlgCtrlID
GetWindowTextA
SetWindowPos
ChildWindowFromPointEx
kernel32
GetStartupInfoA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
GetProcAddress
GetModuleHandleA
VirtualUnlock
HeapValidate
InitializeCriticalSection
VirtualFree
LocalLock
GetUserDefaultLCID
HeapReAlloc
IsValidCodePage
GetCPInfoExA
VirtualAllocEx
CreateSemaphoreA
SetLocaleInfoA
GlobalFree
netapi32
NetUserGetInfo
NetGetJoinableOUs
NetGetJoinInformation
NetErrorLogRead
NetGroupAddUser
NetGetDCName
NetGetAnyDCName
NetErrorLogClear
NetConnectionEnum
NetConfigGetAll
NetFileGetInfo
NetGroupAdd
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_acmdln
exit
_XcptFilter
_exit
fopen
fread
_fullpath
fsetpos
fputc
__getmainargs
fscanf
free
fputs
fprintf
ftell
fseek
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 383KB - Virtual size: 573KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ