Static task
static1
Behavioral task
behavioral1
Sample
afdff0d0c6a4a2431d29f37bca0400513b5ff365f31c33f9415abda831e579e6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afdff0d0c6a4a2431d29f37bca0400513b5ff365f31c33f9415abda831e579e6.exe
Resource
win10v2004-20220812-en
General
-
Target
afdff0d0c6a4a2431d29f37bca0400513b5ff365f31c33f9415abda831e579e6
-
Size
516KB
-
MD5
1c50147d57f0d84c81ee33900f3d2f30
-
SHA1
e695ce1563c30e11c3016da3bb63ed972e781022
-
SHA256
afdff0d0c6a4a2431d29f37bca0400513b5ff365f31c33f9415abda831e579e6
-
SHA512
d5d5e90c050d465cf25dec6b57a4e6094f7d41508dc1739393a89c9167c467c43e04ec989aa41bbcd45b712036745356e27ff445d27c99244a486da4f5513cb5
-
SSDEEP
12288:9D/gm5cPMG7BiOavgUR2pyHuMaCb0V27dsuigyxlyb1:LG74TR2it/0g7dqgEyb1
Malware Config
Signatures
Files
-
afdff0d0c6a4a2431d29f37bca0400513b5ff365f31c33f9415abda831e579e6.exe windows x86
5a4afd303e6b8a2637e428d8f8eeae92
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
iphlpapi
GetAdaptersInfo
ws2_32
htons
wtsapi32
WTSRegisterSessionNotification
Sections
.MPRESS1 Size: 461KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE