Static task
static1
Behavioral task
behavioral1
Sample
19ff5c8368ba115772319da15601ef8988afc5747d707cbf6582e1de230d86c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19ff5c8368ba115772319da15601ef8988afc5747d707cbf6582e1de230d86c9.exe
Resource
win10v2004-20220812-en
General
-
Target
19ff5c8368ba115772319da15601ef8988afc5747d707cbf6582e1de230d86c9
-
Size
113KB
-
MD5
aa4a93ca68d7064f1417219dcdd05beb
-
SHA1
c062d2fbcfca24c8c31840bc10160d3e388f07be
-
SHA256
19ff5c8368ba115772319da15601ef8988afc5747d707cbf6582e1de230d86c9
-
SHA512
8456e415c7cd34e7a3e300cbf3d9114149c1e951a6e41050dbcc09d1097362934d83359d83cd7f7af427f2ce27592b5e8605203b6753fdfe462eda6011cc4c0f
-
SSDEEP
768:zAX4y7o/7y4OVlBJkyUCHQFTMCZiMEV0DI66Xm8lQSm4UayqISn1v+xXP0M60EU/:k4y7Hdo2wFTSMEVyI6glfq+qF60E/U
Malware Config
Signatures
Files
-
19ff5c8368ba115772319da15601ef8988afc5747d707cbf6582e1de230d86c9.exe windows x86
e8f2482cf98e4535178795ac7361c7ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
DeleteFileW
user32
AppendMenuW
IsMenu
CloseWindow
LoadMenuA
advapi32
RegQueryValueExW
RegGetKeySecurity
Sections
.kfghd Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mndbc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eohho Size: 72KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.feaca Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ