Static task
static1
Behavioral task
behavioral1
Sample
42d4c64171d2d40dc3c7e6ab2421c045f848b9b1e2bb0bd213ce46b5f9712d9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42d4c64171d2d40dc3c7e6ab2421c045f848b9b1e2bb0bd213ce46b5f9712d9a.exe
Resource
win10v2004-20220812-en
General
-
Target
42d4c64171d2d40dc3c7e6ab2421c045f848b9b1e2bb0bd213ce46b5f9712d9a
-
Size
310KB
-
MD5
95382f1dd42e68b5e3a409374c77b398
-
SHA1
f5bd04ab645050a6103d70eb67138651decb2537
-
SHA256
42d4c64171d2d40dc3c7e6ab2421c045f848b9b1e2bb0bd213ce46b5f9712d9a
-
SHA512
3ed7b6fbb6c525d9e9b7e07b7a6168fdd4bc57d95f8d2d7b9e4546472988dce0b326c7c497b4cad63c363543bd5e9c8731e4463a7ab1178ee13bf50cf5fc570f
-
SSDEEP
6144:izK6pei6FPeuUjy9Bu9Av/uW4u+AoXoQ+31bA+GWLdJxbmRZq9Z:Nwj6F2fC6A8AoX7M5A+GW5bmRkn
Malware Config
Signatures
Files
-
42d4c64171d2d40dc3c7e6ab2421c045f848b9b1e2bb0bd213ce46b5f9712d9a.exe windows x86
c53e58eab16ed5092c1191bd05b3280b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
ExitProcess
ReleaseMutex
HeapDestroy
SetEvent
GetPrivateProfileStringA
AddAtomA
GetTempPathA
DeleteCriticalSection
DeleteTimerQueue
ResumeThread
CloseHandle
GetDriveTypeA
CreateHardLinkA
HeapSize
lstrcmpiA
GetTickCount
IsValidCodePage
GetStartupInfoA
GetLastError
GetModuleHandleA
advapi32
RegLoadKeyA
IsValidAcl
IsValidSid
GetSecurityInfo
CloseTrace
AccessCheck
IsWellKnownSid
RegEnumValueA
ReportEventA
OpenEventLogA
RegEnumKeyExA
FreeSid
LsaClose
RegQueryValueExA
LsaSetSecret
GetFileSecurityA
CloseEventLog
LsaFreeMemory
RegCloseKey
RegCreateKeyExA
apphelp
SdbFindFirstTag
SdbFindNextTag
ApphelpCheckIME
ApphelpShowDialog
SdbFreeFlagInfo
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ