Static task
static1
Behavioral task
behavioral1
Sample
29f45ef07697dbbd7286c0e4db60b785f426b29fe8daeac94d6e40e412a16bd0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29f45ef07697dbbd7286c0e4db60b785f426b29fe8daeac94d6e40e412a16bd0.exe
Resource
win10v2004-20220901-en
General
-
Target
29f45ef07697dbbd7286c0e4db60b785f426b29fe8daeac94d6e40e412a16bd0
-
Size
65KB
-
MD5
c45ec7b0d11dc7041f17d42c20df7b86
-
SHA1
e332bf42be2d46a92331c0bb9cff2c61d55f864a
-
SHA256
29f45ef07697dbbd7286c0e4db60b785f426b29fe8daeac94d6e40e412a16bd0
-
SHA512
59291b3b3b087a66938293a8d60d86b973d42fb63199ded0987e4b8a8c9b88b0acf55ffbbe1f19c91f8f9d932612f6d32b1cf5f5cf3bdf503dcb110e3e96a35e
-
SSDEEP
768:92ZyJaILzuLlHTmksCJTb+262uezKbpuce75NCOdq/nelsBYa/lArrs33lRs9JtG:7spm2uuci5MOcnNBYc6rrGRsHtPoluO
Malware Config
Signatures
Files
-
29f45ef07697dbbd7286c0e4db60b785f426b29fe8daeac94d6e40e412a16bd0.exe windows x86
65063bb9afd77e0f5b6a48302902ec35
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
WriteConsoleOutputA
GetThreadLocale
SetConsoleCursorPosition
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateThread
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
ReadConsoleInputA
SetConsoleCursorInfo
WriteConsoleInputA
lstrcpyA
lstrcatA
LoadLibraryA
GetModuleHandleA
FindResourceA
GetLocaleInfoA
LockResource
GetProcAddress
VirtualAlloc
GetCurrentProcess
WaitForSingleObject
LoadResource
SizeofResource
CloseHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 262KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ