Static task
static1
Behavioral task
behavioral1
Sample
90ac545768b6d3f6800e29b4a7e9c58248e398a9a3818773a25937b4011ca756.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
90ac545768b6d3f6800e29b4a7e9c58248e398a9a3818773a25937b4011ca756.exe
Resource
win10v2004-20221111-en
General
-
Target
90ac545768b6d3f6800e29b4a7e9c58248e398a9a3818773a25937b4011ca756
-
Size
363KB
-
MD5
53b30478ccec3e76058b4b5b166172e1
-
SHA1
1306008d7bf90489affecd736589879dc1582433
-
SHA256
90ac545768b6d3f6800e29b4a7e9c58248e398a9a3818773a25937b4011ca756
-
SHA512
e54e0129b5afb483cb9cffba56197ef1b7f4c39d29be184a3c4c5794247a8f49eeccef64c493d44faa73adbd856b6f011f685240527512109d14e60e85c41f67
-
SSDEEP
6144:iiJwnMGOr8fe0AJgjchjTnDqNkCYV7zj9nd56t6L8R8NmC:N+n9O8e0Fcx/bV7Pn5k+XNH
Malware Config
Signatures
Files
-
90ac545768b6d3f6800e29b4a7e9c58248e398a9a3818773a25937b4011ca756.exe windows x86
7daad91d273a51f762547091ab1e64b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
TlsGetValue
CreateMutexA
GetModuleHandleA
GetDriveTypeA
GetExitCodeProcess
EnumResourceTypesA
Sleep
CloseHandle
SetLastError
GetLastError
GetDiskFreeSpaceExW
GetComputerNameA
DeleteCriticalSection
GetCommandLineA
ReleaseMutex
FreeConsole
VirtualProtect
GetTickCount
LoadLibraryExW
shell32
DuplicateIcon
SHGetDiskFreeSpaceA
ShellMessageBoxA
DragFinish
DragQueryFileA
DragAcceptFiles
DllUnregisterServer
SHGetSettings
SHGetMalloc
StrChrA
SHFree
ShellAboutA
ExtractIconA
printui
vPrinterPropPages
PnPInterface
vQueueCreate
bPrinterSetup
bFolderGetPrinter
user32
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ