Static task
static1
Behavioral task
behavioral1
Sample
ba2cd4084b4fa2344519de99ee1a20b544629cde426bdf5aebd8c624083acef8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba2cd4084b4fa2344519de99ee1a20b544629cde426bdf5aebd8c624083acef8.exe
Resource
win10v2004-20221111-en
General
-
Target
ba2cd4084b4fa2344519de99ee1a20b544629cde426bdf5aebd8c624083acef8
-
Size
65KB
-
MD5
856b255bbe3cef6e3953ec24528f904a
-
SHA1
f55831108f36e0b6931fbfb3620d49adf42b4be4
-
SHA256
ba2cd4084b4fa2344519de99ee1a20b544629cde426bdf5aebd8c624083acef8
-
SHA512
d53fd7a4c119b68c0794cd48bc48bde55193f25a3b21050836d9a9da380a1d9f43b604ea4f8359ce0318e397c365516d7c1e9da798debb2b97413d7c2e356b83
-
SSDEEP
1536:RVhN4pdhE2hwIcXjPmho/+8BxS2wRSw57U63:RVhOhE2WIaPE8uThU63
Malware Config
Signatures
Files
-
ba2cd4084b4fa2344519de99ee1a20b544629cde426bdf5aebd8c624083acef8.exe windows x86
8acea44d8364135cd5848bc748d53860
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ColorAdjustLuma
kernel32
VirtualProtect
GetProcAddress
VirtualAlloc
LoadLibraryA
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE