Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230220-en
General
-
Target
file.exe
-
Size
6.2MB
-
MD5
d161ce6338ce9caeeb5ec59cab80d064
-
SHA1
72c6d994951abc6147e2f4c0544f58669bf613e8
-
SHA256
4a438193a415f2c4eca1161b7ac94ed6531288971dbb2c202704f7b8a72cda4a
-
SHA512
0d721ddcdb822081396b2ba581f7c384e0a7fe2d12fcfbc64add124d590faebfeae5ae2d1b498119ae227fcb1498016ecebc993f2c35ccb3ef83e12db4bcdfe8
-
SSDEEP
196608:3MbVsQOQKuru9q0kB1OGvE5sZ22tf3HL9hf10h:eSgS80kB1OGvBftpht0h
Malware Config
Signatures
Files
-
file.exe.exe windows x86
348773d00220e600aabe04ecb8803881
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
BitBlt
advapi32
CredFree
shell32
ShellExecuteA
crypt32
CryptUnprotectData
gdiplus
GdipFree
setupapi
SetupDiGetClassDevsA
wtsapi32
WTSSendMessageW
Sections
.MPRESS1 Size: 5.9MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE