Static task
static1
Behavioral task
behavioral1
Sample
f93e57326419ab9d6728c8485aac7c5bdc01133546c87c5459a2b3cf5c73ca17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f93e57326419ab9d6728c8485aac7c5bdc01133546c87c5459a2b3cf5c73ca17.exe
Resource
win10v2004-20220901-en
General
-
Target
f93e57326419ab9d6728c8485aac7c5bdc01133546c87c5459a2b3cf5c73ca17
-
Size
299KB
-
MD5
8172c6283f515d9dbbe8422f8d227362
-
SHA1
68ae698adb44ba972fe2dc6db5e092e4238a4220
-
SHA256
f93e57326419ab9d6728c8485aac7c5bdc01133546c87c5459a2b3cf5c73ca17
-
SHA512
f485a865cb17f8533c618094dbfbaee1faa7ba7fa4b4d7ce89fcb54ffb710c761f8cc222f9d7bf6b3974f79db8c578cd1b3eaf1c3891b9617e428d2bdbf480be
-
SSDEEP
6144:IyxMk5+VjLzV9AA3ygCdITgBs3jpqgNPooVZJhoRGCk:IyxxI3V9l3ygqbO3FqgNA+Ji
Malware Config
Signatures
Files
-
f93e57326419ab9d6728c8485aac7c5bdc01133546c87c5459a2b3cf5c73ca17.exe windows x86
bc7409f106a4da0f1ce19bce1e908825
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetLocalTime
ResetEvent
WriteFile
CloseHandle
GetPrivateProfileIntW
GetEnvironmentVariableW
LoadLibraryW
GlobalFlags
GetDriveTypeA
SetEvent
InitializeCriticalSection
lstrlenA
VirtualAllocEx
IsBadStringPtrA
CreateEventW
GetCurrentProcessId
GetCurrentThreadId
GlobalFree
LocalFree
user32
CallWindowProcW
GetClassInfoA
IsWindow
GetKeyboardType
SetFocus
CreateWindowExA
EndDialog
GetCursorInfo
GetClientRect
DrawStateW
GetSysColor
DispatchMessageA
GetSysColor
mmcshext
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ