Static task
static1
Behavioral task
behavioral1
Sample
ba0c9735b72fc34ff4596640e58f1f558cfe3a3856f04da865c53d3067baa29a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba0c9735b72fc34ff4596640e58f1f558cfe3a3856f04da865c53d3067baa29a.exe
Resource
win10v2004-20221111-en
General
-
Target
ba0c9735b72fc34ff4596640e58f1f558cfe3a3856f04da865c53d3067baa29a
-
Size
415KB
-
MD5
8d13d3421cb218ff02fbe98313f4e4ca
-
SHA1
d925e184f1fce5210f2c80863980ae025aa8b974
-
SHA256
ba0c9735b72fc34ff4596640e58f1f558cfe3a3856f04da865c53d3067baa29a
-
SHA512
9e6948d7471be3dd4fa085f0f47afb94f26f16cd3acdd634a0537dbc41c4d136d3efde01e78d499b87b33a149ef3a5f235a55419711ebacbbe21534fb6a5c8eb
-
SSDEEP
12288:SWz1aetblROi9AhJG0FeI9V/iFx9LupnVELZG7NS6:l1Pdl4AEFeI7qKnVQZSS6
Malware Config
Signatures
Files
-
ba0c9735b72fc34ff4596640e58f1f558cfe3a3856f04da865c53d3067baa29a.exe windows x86
593c263f05f4ce17f52c649f2658419a
Code Sign
43:2f:6f:1f:8d:96:d3:85:44:42:7f:00:ce:7c:84:4bCertificate
IssuerCN=dwufsivwqaiNot Before12/11/2011, 17:46Not After31/12/2039, 23:59SubjectCN=Jhopert Ope97:68:94:1b:e7:e7:6e:e1:23:74:41:6f:04:ae:71:ce:ca:d3:12:4fSigner
Actual PE Digest97:68:94:1b:e7:e7:6e:e1:23:74:41:6f:04:ae:71:ce:ca:d3:12:4fDigest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateNO CERTIFICATE01/01/0001, 00:00 Valid: false
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterWindowMessageA
FindWindowA
SendMessageA
ole32
OleDraw
oledlg
ord4
msvcrt
_initterm
__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
kernel32
GetStartupInfoA
ExitProcess
GetProcAddress
GetModuleHandleA
VirtualUnlock
CreateEventA
IsBadReadPtr
HeapSize
LocalSize
GlobalMemoryStatus
LocalLock
WaitForSingleObject
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 926B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 290KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjql Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ