Static task
static1
Behavioral task
behavioral1
Sample
23e7a29063f9e83700a699d7e920672db35797a00fecf33a983a49dc779f3673.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
23e7a29063f9e83700a699d7e920672db35797a00fecf33a983a49dc779f3673.exe
Resource
win10v2004-20220901-en
General
-
Target
23e7a29063f9e83700a699d7e920672db35797a00fecf33a983a49dc779f3673
-
Size
106KB
-
MD5
c455814f2c85baad6e3bb07ebdde2f97
-
SHA1
0b94ea469f5d0ba50d6eb88f3ec0d5e22751b97d
-
SHA256
23e7a29063f9e83700a699d7e920672db35797a00fecf33a983a49dc779f3673
-
SHA512
fd9be8f850da9f33551cd67861513335556e4e0ef6865426a6913dd7e9969008b531f11f48b0120e193cbf348d114d4f17732037303799fe550fc9a882b1ee04
-
SSDEEP
1536:50y9fm7SoDxdSMshIJDTtxdPrF9zsXnevTSG0cGZQmBWZx9JBCl:50WypbJshIJDTtfoXnev0nZQm4ZB4
Malware Config
Signatures
Files
-
23e7a29063f9e83700a699d7e920672db35797a00fecf33a983a49dc779f3673.exe windows x86
3acd32a62088f4bb050643c88aaf97cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
SetEvent
SetEndOfFile
FreeLibrary
GetModuleHandleA
RaiseException
LoadLibraryA
lstrcpyA
LoadLibraryExA
FreeResource
FindFirstFileA
GetFileType
VirtualAlloc
lstrcpynA
ExitProcess
MoveFileExA
GetLastError
HeapAlloc
ExitThread
GetVersionExA
GetStartupInfoA
user32
GetKeyState
EnumWindows
SetWindowTextA
GetIconInfo
DrawMenuBar
GetCursor
GetDCEx
GetSubMenu
CharNextA
GetMenuItemID
EnumChildWindows
EnableMenuItem
SetCursor
GetFocus
GetMenuStringA
EnableScrollBar
GetLastActivePopup
EnableWindow
IsChild
GetClassInfoA
GetDesktopWindow
GetScrollInfo
DispatchMessageA
GetClipboardData
DefWindowProcA
GetCapture
CallNextHookEx
shlwapi
SHDeleteKeyA
gdi32
CopyEnhMetaFileA
SaveDC
SetTextColor
SetBkColor
GetRgnBox
msvcrt
mbstowcs
memmove
wcsncmp
strncmp
calloc
atol
time
exit
sqrt
sprintf
memcpy
exp
clock
log
srand
wcscspn
pow
version
GetFileVersionInfoSizeA
VerInstallFileA
Sections
.CODE Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 999B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE