Static task
static1
Behavioral task
behavioral1
Sample
20b5dd0b9030cfe53d0a5283ec25542028f10e3e872dc79a74743528682d5ec0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20b5dd0b9030cfe53d0a5283ec25542028f10e3e872dc79a74743528682d5ec0.exe
Resource
win10v2004-20220812-en
General
-
Target
20b5dd0b9030cfe53d0a5283ec25542028f10e3e872dc79a74743528682d5ec0
-
Size
305KB
-
MD5
0f9f444922ffe931c394c0c52079c7e9
-
SHA1
9fe8b8a06fc10b508d2bddd82736758cef6fd9a2
-
SHA256
20b5dd0b9030cfe53d0a5283ec25542028f10e3e872dc79a74743528682d5ec0
-
SHA512
a0b92ae046f88157dce2a41fd1f95f8cbac1e0b9872b36654683b8fd11b16692c1d5326df10a8449598f59a752e586e744e1fcc0f018fef0c80d5a00e88a65f6
-
SSDEEP
3072:1vM/pN+rhudKkbCT/zM9ApNw+cuyxrqDkoOsP4e96NtprVp/ymiRjn3KwYMd8xlG:xT/3wMkGeo9Cpymi93WfAo8Ql
Malware Config
Signatures
Files
-
20b5dd0b9030cfe53d0a5283ec25542028f10e3e872dc79a74743528682d5ec0.exe windows x86
afca3725da00860583eeaf86ada9b989
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
FindAtomA
GlobalFlags
GetCurrentThreadId
GetFileTime
CreateEventW
GetEnvironmentVariableW
LoadLibraryW
IsBadStringPtrW
HeapCreate
InitializeCriticalSection
TlsGetValue
LocalFree
ReleaseMutex
GetPrivateProfileStringA
GetDriveTypeA
FindClose
GetCurrentProcessId
ReleaseMutex
lstrlenW
user32
CallWindowProcW
DrawTextA
IsWindow
DrawStateW
SetFocus
DispatchMessageA
CreateWindowExA
GetKeyboardType
GetSysColor
GetClientRect
GetClassInfoA
GetSysColor
EndDialog
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
cryptui
LocalEnroll
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ