Static task
static1
Behavioral task
behavioral1
Sample
WindowsHolographicDevicesWindowsHolographicDevices-type4.6.8.0.exe
Resource
win10v2004-20220812-en
General
-
Target
WindowsHolographicDevicesWindowsHolographicDevices-type4.6.8.0.exe
-
Size
11.2MB
-
MD5
f481381371f0497f283e3fb1d5959b69
-
SHA1
fa10f15a3fd2721ea8ed0544f1f948dfe8f82c5a
-
SHA256
7942043308a1c3960fb15ee48c5558346230ca21a49caf5430cee241e2b8ab7c
-
SHA512
e74d3a250739c8450a7a65f38050282e35b6249009246f2109265a30cb9ae0e42bf18a967b35f931b1bfc238d01e20e8bda90b9fcc680b33cf7d29fe9fd10c62
-
SSDEEP
196608:LbswgiA7R1PYORprcCwbn8cUu8gv6bh7wefRWeZDQZrlm9YTe3qKu5KxNM:sOs1TRprZwbn8t/gvONRH5clmCTspumS
Malware Config
Signatures
Files
-
WindowsHolographicDevicesWindowsHolographicDevices-type4.6.8.0.exe.exe windows x86
24bff06826129533a09ce490c5fe8ff8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EmptyClipboard
CharUpperBuffW
advapi32
RegSetValueExA
Sections
.text Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
U^JHTEGV Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
U^JHTEGV Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
U^JHTEGV Size: 11.0MB - Virtual size: 11.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ