Static task
static1
Behavioral task
behavioral1
Sample
93a58ee0d61cdb9bc5418ba527fcf7ed14b79e948869d7e3a04de7aa6919125d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
93a58ee0d61cdb9bc5418ba527fcf7ed14b79e948869d7e3a04de7aa6919125d.exe
Resource
win10v2004-20220901-en
General
-
Target
93a58ee0d61cdb9bc5418ba527fcf7ed14b79e948869d7e3a04de7aa6919125d
-
Size
394KB
-
MD5
c2526dd5bbde624af6b8d5d51fb203fa
-
SHA1
4708a66b2539c43a7f0e161cf69be059139b7c86
-
SHA256
93a58ee0d61cdb9bc5418ba527fcf7ed14b79e948869d7e3a04de7aa6919125d
-
SHA512
808abeeb51f69c515f4bd63acf6742a833ec56eccb4d396d20fbc53558e2e8dadf41e7b7d885b3dffd794d77ec3375477dec986f2804926ad4b7b7d1833d045f
-
SSDEEP
6144:4WUKFNBG6AxLhfW2CWEXjnwP3bBcf8Xk64Wh2JQCEwZuGHeoWZX2rpPQMfC:4WUKFvG6q1f3WjGQ8063Uh5j0X21QoC
Malware Config
Signatures
Files
-
93a58ee0d61cdb9bc5418ba527fcf7ed14b79e948869d7e3a04de7aa6919125d.exe windows x86
6d40fd66a3c652c2e09675d7197fcc9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
LocalAlloc
GetModuleHandleA
Sleep
LoadResource
GetSystemTime
FindResourceA
GetVersion
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
FindResourceExA
VirtualFree
SetLastError
CloseHandle
LocalLock
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
LocalFree
GetProcAddress
VirtualAlloc
GetACP
GetCPInfo
GetLastError
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetStringTypeW
user32
MessageBoxA
IsWindowVisible
FindWindowA
EnableWindow
GetDC
LoadBitmapA
GetDesktopWindow
gdi32
GetObjectA
DeleteObject
ole32
CoUninitialize
avifil32
AVIBuildFilterA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 324KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 417KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ