Static task
static1
Behavioral task
behavioral1
Sample
67966db26783d930322795bb3745d814eabbcdee3696aaa0ea8b7ca8fcb61c5d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
67966db26783d930322795bb3745d814eabbcdee3696aaa0ea8b7ca8fcb61c5d.exe
Resource
win10v2004-20220812-en
General
-
Target
67966db26783d930322795bb3745d814eabbcdee3696aaa0ea8b7ca8fcb61c5d
-
Size
104KB
-
MD5
258999b451da587d8141a2f1e23a2c30
-
SHA1
4cd2858cb8c6a5d4a2f0eb1f9e869ec0e009a47f
-
SHA256
67966db26783d930322795bb3745d814eabbcdee3696aaa0ea8b7ca8fcb61c5d
-
SHA512
f3d7e6b38c818d98ec4fc3ea8be998d42117860f1a1eaf8ea28bb92ba09aa6f4557d558a5a9290fc7c0fe014caf95876f54ee1001ca00e8d207d8e55d0c933a3
-
SSDEEP
3072:DT6xgafNqC+9mNkJNGiTLs2fioPUDlDHoWPU:DT6NfNqrHE2aSCl5U
Malware Config
Signatures
Files
-
67966db26783d930322795bb3745d814eabbcdee3696aaa0ea8b7ca8fcb61c5d.exe windows x86
bff63b4db9665ae9df3e2256495fc170
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GlobalAddAtomA
GlobalAddAtomA
CloseHandle
VirtualProtect
lstrcpyA
HeapCreate
LocalFree
GetLastError
GlobalFree
GetStdHandle
EnterCriticalSection
GlobalUnlock
RaiseException
GetACP
GetTimeFormatA
WriteProfileStringA
LockResource
FreeConsole
DeleteAtom
SizeofResource
user32
GetClassInfoExA
ValidateRect
AlignRects
GetClassNameA
IsIconic
GetWindowTextLengthA
BeginPaint
GetWindow
EndPaint
ShowWindow
GetFocus
GetParent
GetDC
GetActiveWindow
ReleaseDC
CloseWindow
DrawEdge
GetWindowTextA
GetForegroundWindow
mprapi
MprAdminUserWrite
MprAdminUserGetInfo
MprAdminUserOpen
MprAdminUserClose
MprAdminUserRead
mapi32
MAPILogonEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ