Static task
static1
Behavioral task
behavioral1
Sample
12ffdcc68d805f86681e0534220103c1d14c1c4052d506a748a4f082d67f59c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12ffdcc68d805f86681e0534220103c1d14c1c4052d506a748a4f082d67f59c6.exe
Resource
win10v2004-20220812-en
General
-
Target
12ffdcc68d805f86681e0534220103c1d14c1c4052d506a748a4f082d67f59c6
-
Size
751KB
-
MD5
52ad08b813e2d7d713ee856b9dbfbc77
-
SHA1
4c729ba6ee28b7dbdee79aa1f0d466c411be0cb8
-
SHA256
12ffdcc68d805f86681e0534220103c1d14c1c4052d506a748a4f082d67f59c6
-
SHA512
070d3cc05383b0f7ca7c57aad0e3148aa011f83dde0ff475078929efa27b2fd640b0a0f00238f522070f3984f5fbb1c84fa883abdadac37175063dce1878ff7e
-
SSDEEP
12288:n4Z6Zn7cBLeWNR7DiQm5BNCSIwsfmgDgeo++k7BOqnt8lYN68w2tKmkTMfA:4Z6SoWr7eQoBtsaeo2dtf02hkA
Malware Config
Signatures
Files
-
12ffdcc68d805f86681e0534220103c1d14c1c4052d506a748a4f082d67f59c6.exe windows x86
c8c272e3f3912ea32539560616f9c061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetFileAttributesA
ExitProcess
ResetEvent
RemoveDirectoryA
CreateFileA
GetCommandLineW
CreateMutexA
CloseHandle
GetModuleHandleA
FindClose
HeapSize
GetStartupInfoW
WaitForSingleObject
GetCurrentDirectoryA
GetConsoleTitleA
OpenProcess
CreatePipe
GetEnvironmentVariableW
GetTickCount
Sleep
VirtualAlloc
WaitForMultipleObjects
SetLastError
GetStdHandle
user32
GetWindowLongA
GetSysColor
GetClassInfoA
GetDC
MessageBoxA
DispatchMessageW
PeekMessageA
CallWindowProcW
DispatchMessageW
GetDC
GetDC
FillRect
FindWindowW
ureg
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 745KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ