Static task
static1
Behavioral task
behavioral1
Sample
91bd5168b9b0026bfcc02f4a30c11f76d8663ef3ccf734afcc490098b517fa25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91bd5168b9b0026bfcc02f4a30c11f76d8663ef3ccf734afcc490098b517fa25.exe
Resource
win10v2004-20220901-en
General
-
Target
91bd5168b9b0026bfcc02f4a30c11f76d8663ef3ccf734afcc490098b517fa25.exe
-
Size
71KB
-
MD5
b3f5d8a881bf8c1c0431cb6b9747918f
-
SHA1
7c2b61a227133ce76c2b2fa95945c82647cfb5fc
-
SHA256
91bd5168b9b0026bfcc02f4a30c11f76d8663ef3ccf734afcc490098b517fa25
-
SHA512
1872ab6ecf9fd7035472a51f4eba681e26674532d0a86604bdee8c77c33234426aaf90b02c572572c412482f19f81388f2110787bb2fa04b04be08308a54e15b
-
SSDEEP
768:HnI8FVk+TrPonxlCpMZTJcNGsryeqpNaO4izP2UCXkwdbA/aNtGBVsKB/sQ7cF9R:oo+6PikSZl7e6rW0wdbAyNcQDmnZS
Malware Config
Signatures
Files
-
91bd5168b9b0026bfcc02f4a30c11f76d8663ef3ccf734afcc490098b517fa25.exe.exe windows x86
1aab3d95a84f07254b335c0034ee35ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
lstrcmpW
LoadLibraryA
ExitThread
lstrcatW
WideCharToMultiByte
OpenProcess
GetCurrentProcess
TerminateProcess
GetProcessId
lstrcmpiW
GetModuleHandleA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
LocalAlloc
lstrlenA
netapi32
NetApiBufferFree
NetShareEnum
rstrtmgr
RmStartSession
RmEndSession
RmRegisterResources
RmGetList
shlwapi
PathFindExtensionW
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 790B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ