Static task
static1
Behavioral task
behavioral1
Sample
686f4c7fa4eec0356cc6e784d7ecb26e7c73ea6ae600d7cedd44ace648b777f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
686f4c7fa4eec0356cc6e784d7ecb26e7c73ea6ae600d7cedd44ace648b777f5.exe
Resource
win10v2004-20220901-en
General
-
Target
686f4c7fa4eec0356cc6e784d7ecb26e7c73ea6ae600d7cedd44ace648b777f5
-
Size
121KB
-
MD5
11cdd9822fa3fb555a92bcafd8b0ba3f
-
SHA1
4f56d424e527bb5f1aa9165813be30d30198cad3
-
SHA256
686f4c7fa4eec0356cc6e784d7ecb26e7c73ea6ae600d7cedd44ace648b777f5
-
SHA512
f80f6d007e9f1a9d8ed73cf0fee49000263d4f19fb5640408712b0c9dd2bafa065674cba0e512582346713791cda714c2ab7db2121dbbe51be3702baf15b75a2
-
SSDEEP
1536:iUK3ATn6Q1w6ZnBbWxu5hb86HTU879i0PORJrqpzuQf1H+:SwTJPl9Wxuw6HTqR4p1
Malware Config
Signatures
Files
-
686f4c7fa4eec0356cc6e784d7ecb26e7c73ea6ae600d7cedd44ace648b777f5.exe windows x86
cf4c8c331e1c03c058eca710d9dcee77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoA
user32
IntersectRect
MessageBoxA
DestroyCursor
SetCapture
SetParent
DefFrameProcA
LoadKeyboardLayoutA
GetClassLongA
GetMenuItemCount
MessageBeep
GetSystemMenu
RemovePropA
RegisterWindowMessageA
DefWindowProcA
GetKeyboardState
SetFocus
ReleaseCapture
IsChild
GetTopWindow
CallNextHookEx
ScreenToClient
SetScrollInfo
DrawIcon
OffsetRect
SetMenuItemInfoA
LoadStringA
PeekMessageW
IsWindowUnicode
DispatchMessageA
gdi32
CreatePenIndirect
kernel32
SetFilePointer
GetLastError
GetModuleHandleA
CloseHandle
VirtualAllocEx
GetTickCount
GetProcAddress
DeleteFileA
GetCurrentThreadId
ExitThread
LocalAlloc
advapi32
RegDeleteKeyA
RegEnumValueA
shlwapi
PathIsDirectoryA
PathFileExistsA
SHQueryInfoKeyA
PathIsContentTypeA
shell32
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHGetFileInfoA
comdlg32
GetFileTitleA
FindTextA
ole32
CoTaskMemFree
CoReleaseMarshalData
StringFromIID
CoGetContextToken
comctl32
ImageList_Draw
ImageList_DrawEx
ImageList_Destroy
oleaut32
SysAllocStringLen
VariantCopyInd
SysReAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SysStringLen
GetErrorInfo
SysFreeString
SafeArrayGetUBound
SafeArrayCreate
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ