Static task
static1
Behavioral task
behavioral1
Sample
95245b3f43068cb4fe43c5badcfeb5f09577ade200ccf1d1ab7942e6fcfd4cfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95245b3f43068cb4fe43c5badcfeb5f09577ade200ccf1d1ab7942e6fcfd4cfb.exe
Resource
win10v2004-20220812-en
General
-
Target
95245b3f43068cb4fe43c5badcfeb5f09577ade200ccf1d1ab7942e6fcfd4cfb
-
Size
210KB
-
MD5
4ed6b673d6014f97a7889225075b104b
-
SHA1
07a111bf7ff5ebadcabc6566c60ea08f7e0fdf66
-
SHA256
95245b3f43068cb4fe43c5badcfeb5f09577ade200ccf1d1ab7942e6fcfd4cfb
-
SHA512
91c6424fe0a70dd4eb03b5767897c0332f528046c5bc9f886dba01c042868101684c5b3160477b5631b4ed29e426f9b745058e42220d32c8955c960eb8724531
-
SSDEEP
3072:sZGcuPVmpUNrjnosm3zhtCykk1WlvSm/YJ1vjo/9b9xW0IVqPaK:/PKOosm3Nt2QWlvf/K1vE/9bmL
Malware Config
Signatures
Files
-
95245b3f43068cb4fe43c5badcfeb5f09577ade200ccf1d1ab7942e6fcfd4cfb.exe windows x86
46fa21e0f2fb55c54ee90e19e76afba1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
VirtualAllocEx
ExitProcess
IsBadHugeReadPtr
GetCommandLineW
ExitThread
GetCommandLineA
LoadLibraryExA
lstrlenA
GetProcAddress
GetModuleHandleA
LoadLibraryA
ole32
GetHGlobalFromStream
CreateBindCtx
CoRegisterClassObject
CoCreateInstanceEx
WriteClassStm
CoGetObjectContext
PropVariantClear
user32
CharToOemA
MapWindowPoints
shlwapi
PathFileExistsA
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rsrc5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc0 Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc6 Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rsrc2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rsrc8 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rsrc9 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ