Static task
static1
Behavioral task
behavioral1
Sample
95a36bc5c91f8852efe41232994cc2f2d3745ec7147876416c06ebb95dc49d93.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
95a36bc5c91f8852efe41232994cc2f2d3745ec7147876416c06ebb95dc49d93.exe
Resource
win10v2004-20220901-en
General
-
Target
95a36bc5c91f8852efe41232994cc2f2d3745ec7147876416c06ebb95dc49d93
-
Size
267KB
-
MD5
06856ed4d902f436eac3cb439dc7c144
-
SHA1
3d10132709420fe6eaf841015e156ff218be7ef0
-
SHA256
95a36bc5c91f8852efe41232994cc2f2d3745ec7147876416c06ebb95dc49d93
-
SHA512
dfb8e36b331665ac9497486675c4bcd203cba0ac5c92553a121aff9ff65325153a45e3ba9e3f1c49e859ffeea0548938d928e9f8498ef23ebc736e44ec79841e
-
SSDEEP
6144:aI+PLRh/LokUE+995m65TWjoIIx+nvl+EUmNnZh+2X:UPLRh/sQ+99LBWUHgvlO0nZQQ
Malware Config
Signatures
Files
-
95a36bc5c91f8852efe41232994cc2f2d3745ec7147876416c06ebb95dc49d93.exe windows x86
d968b682814992946445375c1bf13a79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
GlobalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
Sleep
user32
SystemParametersInfoA
ReleaseDC
GetClientRect
GetDC
GetSystemMetrics
gdi32
GetDIBits
GetObjectA
BitBlt
SelectObject
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
CreateCompatibleDC
DeleteObject
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ