Static task
static1
Behavioral task
behavioral1
Sample
2816c9cd2d82e1fefa82870e93b44a53803058cc45ed91e800899549341c7b10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2816c9cd2d82e1fefa82870e93b44a53803058cc45ed91e800899549341c7b10.exe
Resource
win10v2004-20220812-en
General
-
Target
2816c9cd2d82e1fefa82870e93b44a53803058cc45ed91e800899549341c7b10
-
Size
176KB
-
MD5
d58c72befd0f7f041de4a33dd7606412
-
SHA1
56feea44535ece8d85573ed9689d90f8b7901018
-
SHA256
2816c9cd2d82e1fefa82870e93b44a53803058cc45ed91e800899549341c7b10
-
SHA512
c1b1cc1ff3ef20a02e8b6950ae66155fa7ac0e0dc5fafec549d2d8d3e477a1e37398549c2a93788c4fdbfce3205811372182628ec20f29282864ee9508b1ce90
-
SSDEEP
3072:8ONnhRPpEphw4jj49LfKeFYUl3Jgl7Sn90f1NDNZkzO1hm:/1LPpQYNw+0f1ND3vm
Malware Config
Signatures
Files
-
2816c9cd2d82e1fefa82870e93b44a53803058cc45ed91e800899549341c7b10.exe windows x86
bc1de27e6c1daf3c104397bf3948430a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
CloseHandle
CreateFileA
LCMapStringA
user32
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA
advapi32
RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
Sections
.text Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ