Static task
static1
Behavioral task
behavioral1
Sample
de649d8b7ff5df95ac73daadf00669315e53a53c01aa11aedcf2369567613db9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
de649d8b7ff5df95ac73daadf00669315e53a53c01aa11aedcf2369567613db9.exe
Resource
win10v2004-20220812-en
General
-
Target
de649d8b7ff5df95ac73daadf00669315e53a53c01aa11aedcf2369567613db9
-
Size
1.2MB
-
MD5
613dff2ccaaf6eeb14a9ea1abbc72dda
-
SHA1
c9308575f717bfa9f407e5d5cf889a123ab4c28e
-
SHA256
de649d8b7ff5df95ac73daadf00669315e53a53c01aa11aedcf2369567613db9
-
SHA512
3477ef3a09ed0713f70376dbe241a4f085eb332173d1700d6cedfa7614dae449374f24ad8389a2bd8acea43b4e74274a7426e62883f53cab6260d2f226dd2039
-
SSDEEP
24576:LnT6OD4NYno3G0IFJnd2Ih2P2A+W/GAxHkhJC/DR73S28hy:qG4NBKFJnd2Ih27+IpefCrRzB
Malware Config
Signatures
Files
-
de649d8b7ff5df95ac73daadf00669315e53a53c01aa11aedcf2369567613db9.exe windows x86
47eb9305887fe4f5c50c5f0c1994a4c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
FreeSid
gdi32
GetDeviceCaps
user32
GetDC
msvcrt
exit
comctl32
ord17
version
VerQueryValueA
Sections
.MPRESS1 Size: 1.2MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE