Static task
static1
Behavioral task
behavioral1
Sample
94376e1af12a056102089000d0a8c7118d831bacdb6598573a84512e9ea8680b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
94376e1af12a056102089000d0a8c7118d831bacdb6598573a84512e9ea8680b.exe
Resource
win10v2004-20221111-en
General
-
Target
94376e1af12a056102089000d0a8c7118d831bacdb6598573a84512e9ea8680b
-
Size
311KB
-
MD5
7660f7946ea6f758f6cb4d9c3c686843
-
SHA1
2ad7cfcdafba01937c85fdea3cdcded6553b4cf1
-
SHA256
94376e1af12a056102089000d0a8c7118d831bacdb6598573a84512e9ea8680b
-
SHA512
d2e5f02d94a9b0f99a20ca83ba93affd8cadaff92929898831257ea8b0f748571ca15db6e12ff184307146198ab110255840a604a8bc27fb21d9790a34af7a02
-
SSDEEP
6144:Bv5KMTNzzfnZNMcWB4/AYOP4gvgpIyrHbrVZlfJ73dFWylPGFcr8:BhNnTW4/AXPMpzx5lPecY
Malware Config
Signatures
Files
-
94376e1af12a056102089000d0a8c7118d831bacdb6598573a84512e9ea8680b.exe windows x86
c0391a394bcee74fd18481567fbb7baa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCompressedFileSizeA
RaiseException
GetACP
IsDebuggerPresent
ReadConsoleA
GetModuleHandleA
GlobalFree
GetSystemDirectoryA
FlushFileBuffers
GetCurrentProcessId
GetLocaleInfoA
GetCommandLineA
VirtualProtect
GetCurrentThread
GetCurrentProcess
InterlockedExchange
HeapCreate
FreeEnvironmentStringsA
SetEvent
GetStdHandle
OpenMutexA
user32
ValidateRgn
FrameRect
GetDlgItem
ReleaseDC
GetClassNameA
FillRect
IsIconic
ShowWindow
EndPaint
DrawTextA
GetWindow
BeginPaint
GetParent
GetWindowTextA
GetFocus
wsprintfA
GetCursorPos
SetForegroundWindow
SetActiveWindow
linkinfo
CreateLinkInfoA
ResolveLinkInfoA
DestroyLinkInfo
IsValidLinkInfo
GetLinkInfoData
rtutils
LogErrorA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ