Static task
static1
Behavioral task
behavioral1
Sample
96656508d62da9c02713af278b891aa2265a29fb5ba08df5b0c82c52f479ce31.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
96656508d62da9c02713af278b891aa2265a29fb5ba08df5b0c82c52f479ce31.exe
Resource
win10v2004-20221111-en
General
-
Target
96656508d62da9c02713af278b891aa2265a29fb5ba08df5b0c82c52f479ce31
-
Size
404KB
-
MD5
3bd92d08ac96fb981c3a5f2bea461ac2
-
SHA1
d30e389d585350be565354479bcab15e07bb7646
-
SHA256
96656508d62da9c02713af278b891aa2265a29fb5ba08df5b0c82c52f479ce31
-
SHA512
02a1d82ba229b1cf9c6052d3bd96b34e370e2b3c4cb6752dc2ab4a873b42c30bf50610d666ae87a165ecaa521594f30dba58debfb71eff24ad58508518e5d2db
-
SSDEEP
12288:YpW9w5/5QtHlqJXOdp4PbwZvwAzVyJFlDkKwDknvBdL:fw5qll5p4Pbw5wmWr4JDknvBdL
Malware Config
Signatures
Files
-
96656508d62da9c02713af278b891aa2265a29fb5ba08df5b0c82c52f479ce31.exe windows x86
03a8717af4afb0642e4b515f6381de77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
LocalSize
GetLastError
Sleep
VirtualAlloc
GetProcAddress
SetEvent
GetModuleHandleA
GetCurrentThreadId
user32
IsZoomed
IsWindowVisible
EnumThreadWindows
GetClientRect
gdi32
PatBlt
ole32
CoInitialize
netapi32
NetDfsManagerInitialize
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ