Static task
static1
Behavioral task
behavioral1
Sample
58fa5f5cf522dc9c9a55fed8088655e2c71360c4f52083f116103f87d064c1d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
58fa5f5cf522dc9c9a55fed8088655e2c71360c4f52083f116103f87d064c1d9.exe
Resource
win10v2004-20220901-en
General
-
Target
58fa5f5cf522dc9c9a55fed8088655e2c71360c4f52083f116103f87d064c1d9
-
Size
223KB
-
MD5
c261a7ac2867bbebb0397f2d526b0096
-
SHA1
535ffad7e9351344b270deb2c3843e80a3320091
-
SHA256
58fa5f5cf522dc9c9a55fed8088655e2c71360c4f52083f116103f87d064c1d9
-
SHA512
12d6d4688c4cc62a15b99e0c72f9d38fff5fdada2d988f720c8c99c2e2a27dd40272d20e078b5912d739c0673abb69bd3871fdf8605d324f001b99d90ed9ce89
-
SSDEEP
3072:7XEviQSRsISD25bOMWWbVDs9tFekP/uJpn2LXRRORFYmTnLsqp:zEviQI4KbOHWblsoC/uLYRR8zTno
Malware Config
Signatures
Files
-
58fa5f5cf522dc9c9a55fed8088655e2c71360c4f52083f116103f87d064c1d9.exe windows x86
26fe4e9a9c535e5f45203ba4f66d3d5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateGuid
ntdll
NtClose
_ftol
memmove
DbgPrint
NtOpenKey
NtQueryValueKey
RtlInitUnicodeString
RtlUnicodeToMultiByteN
gdi32
BitBlt
GetObjectA
GetSystemPaletteEntries
CreateCompatibleDC
SelectObject
DeleteDC
advapi32
RegCloseKey
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
shell32
CommandLineToArgvW
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qte Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ