Static task
static1
Behavioral task
behavioral1
Sample
91686a5c280153a728fe995b554a955a98c1ed51ffe6e08e99842b88adb9f810.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
91686a5c280153a728fe995b554a955a98c1ed51ffe6e08e99842b88adb9f810.exe
Resource
win10v2004-20221111-en
General
-
Target
91686a5c280153a728fe995b554a955a98c1ed51ffe6e08e99842b88adb9f810
-
Size
1.0MB
-
MD5
0db1c3d0fa196a5e40853fe16c2ec664
-
SHA1
5dcbe9b40fe29fba644fdfffe65d9c4a3b61a6d1
-
SHA256
91686a5c280153a728fe995b554a955a98c1ed51ffe6e08e99842b88adb9f810
-
SHA512
b090eefad207c332b3f79c5c1a4c691ad6491888591f5d202bc0007c7498cfb54adfa817f7a40341659057351a70693307e7744462a0e809b5dda546796b0694
-
SSDEEP
24576:i2kmoBD0sqIYyBPppWWeKE6HtDT4X1sYszl2rg6yz/Jz1m+/:i2ktBAsCy3h1Ts6YOlOQdz4+/
Malware Config
Signatures
Files
-
91686a5c280153a728fe995b554a955a98c1ed51ffe6e08e99842b88adb9f810.exe windows x86
4582ffdd7eb98cb63a937096204182b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 1.4MB
.idata Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ