Static task
static1
Behavioral task
behavioral1
Sample
91a6e3f565dd794c360330f42d0ef6f9731bb4bb2ad75f2d9e30a385fe7757dc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
91a6e3f565dd794c360330f42d0ef6f9731bb4bb2ad75f2d9e30a385fe7757dc.exe
Resource
win10v2004-20220812-en
General
-
Target
91a6e3f565dd794c360330f42d0ef6f9731bb4bb2ad75f2d9e30a385fe7757dc
-
Size
60KB
-
MD5
f3fd8fe8c9dc44ebfc54e6fa0ece9954
-
SHA1
7da9b2baaa01186b4f56107e2480e8456a856e17
-
SHA256
91a6e3f565dd794c360330f42d0ef6f9731bb4bb2ad75f2d9e30a385fe7757dc
-
SHA512
b3596041dd8d64c122645ef3f0367345fe78d7f7eb79ad99e50e811fcd304285ed60ded998520ae6cb50bf4f542b968e6a40fc6c45b2823aa556639dcff0b4db
-
SSDEEP
1536:ivqYTvO/qvCom6BStWXcCsjGApmaCE3/:ivrfjgWXcCW4c/
Malware Config
Signatures
Files
-
91a6e3f565dd794c360330f42d0ef6f9731bb4bb2ad75f2d9e30a385fe7757dc.exe windows x86
2ff3a5f3753ec18bab0a7861deb2b8c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateMutexA
CreateThread
DeleteFileA
EnterCriticalSection
GetComputerNameA
GetCurrentThread
GetEnvironmentVariableA
GetProcessHeap
GetSystemDefaultLCID
GetVersionExA
GlobalFree
IsBadCodePtr
LoadLibraryA
LocalAlloc
LocalSize
LocalUnlock
RaiseException
ResumeThread
SetCurrentDirectoryA
SetErrorMode
SetFilePointer
SetThreadPriority
Sleep
TerminateProcess
WaitForSingleObject
WriteConsoleA
lstrcatA
lstrcpynA
lstrlenA
user32
CallWindowProcW
EndDialog
EnumDisplaySettingsA
EnumWindows
ExitWindowsEx
GetParent
GetSystemMetrics
InsertMenuW
IsMenu
IsRectEmpty
IsWindowEnabled
LoadIconW
RedrawWindow
ReleaseDC
ScreenToClient
WindowFromPoint
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ