Static task
static1
Behavioral task
behavioral1
Sample
58e501e64913976eaba3856c9c348734dabf598312e71538606f91a8c012c378.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58e501e64913976eaba3856c9c348734dabf598312e71538606f91a8c012c378.exe
Resource
win10v2004-20220901-en
General
-
Target
58e501e64913976eaba3856c9c348734dabf598312e71538606f91a8c012c378
-
Size
83KB
-
MD5
7481d24422ff0e00cedd78e8d5d1a65e
-
SHA1
bea44010ad2a29ddfc6ac6539ef58196eae937a8
-
SHA256
58e501e64913976eaba3856c9c348734dabf598312e71538606f91a8c012c378
-
SHA512
00d42031776afbd1312df1f13c8e416b268fc012dae2c4c4d7255816277b92ba17c86ccb8a016df11d84eea9cdd67cb103f860813182f5729f5b133b43c2dbc2
-
SSDEEP
1536:eeYpOXIITjswwbKIk6RdKlqlBjtxsDGD22DtGC0shH2pR9+N+w:ed2I+wcIYArjtxgADICz09+N+w
Malware Config
Signatures
Files
-
58e501e64913976eaba3856c9c348734dabf598312e71538606f91a8c012c378.exe windows x86
70d9b088a5caee6d374378c95edcbfcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetStdHandle
CloseHandle
lstrcpyA
CloseHandle
lstrcmpiA
CloseHandle
HeapAlloc
CloseHandle
GetLastError
CloseHandle
lstrcatA
CloseHandle
GetModuleFileNameA
CloseHandle
GetDateFormatA
CloseHandle
user32
AlignRects
EndDialog
GetWindowTextLengthA
CloseWindow
GetDlgItem
DialogBoxParamA
DrawTextW
InsertMenuA
DrawIcon
GetMenu
CopyImage
BlockInput
AppendMenuW
IsWindow
GetDC
GetFocus
DialogBoxParamW
GetCursor
DrawTextA
GetWindowTextA
CreateIcon
CopyRect
LoadMenuA
LoadCursorA
CalcMenuBar
CopyIcon
AppendMenuA
IsMenu
DrawIconEx
AppendMenuA
DialogBoxParamA
EndDialog
GetDlgItem
LoadMenuA
GetDC
IsMenu
CalcMenuBar
GetFocus
CopyImage
CopyIcon
CreateIcon
GetMenu
IsWindow
AlignRects
InsertMenuA
DrawIcon
CloseWindow
GetCursor
DrawIconEx
DialogBoxParamW
GetWindowTextA
DrawTextW
GetWindowTextLengthA
BlockInput
LoadCursorA
AppendMenuW
DrawTextA
CopyRect
advapi32
RegEnumKeyExW
RegQueryValueW
RegLoadKeyA
RegQueryValueExW
RegCreateKeyW
RegEnumKeyW
RegOpenKeyExA
RegEnumKeyExA
RegReplaceKeyW
RegEnumValueA
RegEnumValueW
RegDeleteKeyW
RegCreateKeyExA
RegDeleteValueA
RegQueryValueA
RegQueryInfoKeyA
RegReplaceKeyA
RegEnumKeyA
RegQueryValueExA
RegGetKeySecurity
RegFlushKey
RegDeleteValueW
RegOpenKeyW
RegCreateKeyExW
RegLoadKeyW
RegOpenKeyA
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExW
RegQueryInfoKeyA
RegReplaceKeyA
RegEnumKeyExA
RegEnumValueW
RegOpenKeyW
RegOpenKeyA
RegDeleteValueW
RegEnumValueA
RegQueryValueExW
RegOpenKeyExW
RegLoadKeyW
RegCreateKeyW
RegCreateKeyExW
RegEnumKeyA
RegDeleteValueA
RegQueryInfoKeyW
RegDeleteKeyA
RegEnumKeyW
RegQueryValueA
RegQueryValueExA
RegQueryValueW
RegLoadKeyA
RegOpenKeyExA
RegFlushKey
RegReplaceKeyW
RegDeleteKeyW
RegGetKeySecurity
Sections
.tedt Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 6KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relac Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iadta Size: 1024B - Virtual size: 858B
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ