Static task
static1
Behavioral task
behavioral1
Sample
024a8266f79bb5bc86a50c289d716566460576743ba28b218ab5883bf44e5fce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
024a8266f79bb5bc86a50c289d716566460576743ba28b218ab5883bf44e5fce.exe
Resource
win10v2004-20220901-en
General
-
Target
024a8266f79bb5bc86a50c289d716566460576743ba28b218ab5883bf44e5fce
-
Size
40KB
-
MD5
49f9286767af42da42cf9eca85ea6c7f
-
SHA1
7e7c02e042024465f25dd14dfa2af059108a1738
-
SHA256
024a8266f79bb5bc86a50c289d716566460576743ba28b218ab5883bf44e5fce
-
SHA512
844d81e09d3abf5d3d8e62ef5efcb2d3a4305898d71ed3cc2261f93252c086c38f632b68312fc3e88fdaec728cc7465096cac3402e7e11643e48160c556bd70f
-
SSDEEP
384:J1DM1nHKllg/rmlX4t/vZykaLGjC/yJotiOFjl:jqH4g//ZMGjCaJoXFjl
Malware Config
Signatures
Files
-
024a8266f79bb5bc86a50c289d716566460576743ba28b218ab5883bf44e5fce.exe windows x86
f4c64b78863035091849724d3f1a161c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
OpenMutexA
Sleep
GetCurrentProcess
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
lstrcpyA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
MultiByteToWideChar
GetStringTypeA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetACP
GetStringTypeW
GetCPInfo
VirtualAlloc
GetOEMCP
HeapAlloc
HeapReAlloc
user32
RegisterClassA
MessageBoxA
LoadCursorA
LoadIconA
gdi32
GetStockObject
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ