Static task
static1
Behavioral task
behavioral1
Sample
788c07cea6101ebd484ee69ff776d4d053ce5b7804ec3f945c43a5f7d62a7798.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
788c07cea6101ebd484ee69ff776d4d053ce5b7804ec3f945c43a5f7d62a7798.exe
Resource
win10v2004-20221111-en
General
-
Target
788c07cea6101ebd484ee69ff776d4d053ce5b7804ec3f945c43a5f7d62a7798
-
Size
385KB
-
MD5
95d33dd913e9e392e254352432bbcf70
-
SHA1
add780b95443534742a135332dc633ac86427871
-
SHA256
788c07cea6101ebd484ee69ff776d4d053ce5b7804ec3f945c43a5f7d62a7798
-
SHA512
1ceeda7dae4254c547cac8501d128edd38222c72e06bc2d557455926b9eb65841fd911a14de3dc245684a5466f2ad8fd34eadb520c78105a0b7d32edef98f374
-
SSDEEP
6144:ovwPcpCG0fJMHneMCDB6sEFu6XwydbyY9gHDtWGDSYAnLCI:Qz4G0fchCd+RXwycY9gkGTALb
Malware Config
Signatures
Files
-
788c07cea6101ebd484ee69ff776d4d053ce5b7804ec3f945c43a5f7d62a7798.exe windows x86
fa972455b8a99a18a841249f162d2de2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
ResumeThread
GetExitCodeProcess
FreeConsole
FindVolumeClose
InterlockedExchange
LocalFree
ResetEvent
LocalSize
lstrlenA
WriteFile
CloseHandle
GlobalFree
VirtualAlloc
GetModuleHandleW
GetDriveTypeW
CreateThread
GetACP
GetPrivateProfileIntW
GetEnvironmentVariableA
user32
GetKeyboardType
DrawStateW
CallWindowProcW
GetClassInfoA
GetCursorInfo
GetSysColor
SetFocus
DispatchMessageA
IsWindow
CreateWindowExA
GetSysColor
EndDialog
GetClientRect
qedit
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ