Static task
static1
Behavioral task
behavioral1
Sample
872ccc6703fd60453516d88015db8d1c0b8e8282ac81915c715b882925c37f83.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
872ccc6703fd60453516d88015db8d1c0b8e8282ac81915c715b882925c37f83.exe
Resource
win10v2004-20221111-en
General
-
Target
872ccc6703fd60453516d88015db8d1c0b8e8282ac81915c715b882925c37f83
-
Size
30KB
-
MD5
1706e7dca9cc3227c594d947abdd15a0
-
SHA1
ab9d78a9bba1c40e034b822ad151f74bf04d5144
-
SHA256
872ccc6703fd60453516d88015db8d1c0b8e8282ac81915c715b882925c37f83
-
SHA512
251a5df07b037a55e1d583305cbc72c8adb99f358a323b540b19ad10afd2c1824af93006566bd9bfbbdf43b9f0411939681e014e2b24ba0e1166f162343ddfe8
-
SSDEEP
384:DyUpO9dlv/dM4JvmNvFCMJYAAMYvceqS/cS48g2PNs8/5aCyXws+9/TjWM:D0dlv/8xc+As4D4/e/JyXwht3
Malware Config
Signatures
Files
-
872ccc6703fd60453516d88015db8d1c0b8e8282ac81915c715b882925c37f83.exe windows x86
4e84657962a7c54a9b2351da5b362685
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
TerminateProcess
GetProcAddress
LoadLibraryA
lstrcmpiW
OutputDebugStringA
lstrcpyA
SwitchToThread
GetModuleHandleW
GetStartupInfoW
user32
DispatchMessageW
GetMessageA
TranslateMessage
OpenClipboard
GetActiveWindow
FindWindowA
powrprof
CanUserWritePwrScheme
wintrust
WinVerifyTrust
ntdll
DbgPrint
msvcrt
__setusermatherr
_adjust_fdiv
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
__p__fmode
_controlfp
_except_handler3
__set_app_type
__p__commode
ws2_32
socket
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ