Static task
static1
Behavioral task
behavioral1
Sample
957f14fdd5f6019e1b0d99ea2adc674a2db5fba614337889cb5955e2cf47769d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
957f14fdd5f6019e1b0d99ea2adc674a2db5fba614337889cb5955e2cf47769d.exe
Resource
win10v2004-20220812-en
General
-
Target
957f14fdd5f6019e1b0d99ea2adc674a2db5fba614337889cb5955e2cf47769d
-
Size
168KB
-
MD5
c4220e90c270211b9fb7c02017a814d1
-
SHA1
bf85354e5ec281367efc5344a9bd7279ef731d15
-
SHA256
957f14fdd5f6019e1b0d99ea2adc674a2db5fba614337889cb5955e2cf47769d
-
SHA512
9fb5ad7eb995d0e89fb1fb3a8957b4e85391ede6b256370c16c82f58e924800d0526794bd38f39ddf3f8ff6b6775d3c346fe0a4dbb395adb3f5553461b96a2b4
-
SSDEEP
3072:7JQL5F14yXFikzxiFJwtwjnrgRQpwnIapRdkuAfEh/aGWSl4oWlVeR:7JQL57GmgnccOkuAssGWSCs
Malware Config
Signatures
Files
-
957f14fdd5f6019e1b0d99ea2adc674a2db5fba614337889cb5955e2cf47769d.exe windows x86
57c4b1513c02c2979637b0acbf0cb561
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtQuerySystemTime
RtlIdentifierAuthoritySid
RtlNtStatusToDosError
RtlSubAuthorityCountSid
RtlInitUnicodeString
RtlSubAuthoritySid
kernel32
VirtualAlloc
shlwapi
PathIsUNCServerShareW
PathAppendW
cryptui
CryptUIDlgSelectCertificateW
CryptUIDlgViewCertificateW
ole32
CoGetClassVersion
shell32
ILFindLastID
dsprop
ADsPropSetHwnd
ADsPropCreateNotifyObj
ADsPropShowErrorDialog
ADsPropGetInitInfo
FindSheet
ADsPropSendErrorMessage
ADsPropSetHwndWithTitle
credui
CredUIInitControls
CredUIParseUserNameW
gdi32
CreateHatchBrush
Sections
.text Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE