Static task
static1
Behavioral task
behavioral1
Sample
847fc5cbe3c96731f0023f15a027c3aac486b194201c78bdd89b6d4f578eeedf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
847fc5cbe3c96731f0023f15a027c3aac486b194201c78bdd89b6d4f578eeedf.exe
Resource
win10v2004-20220812-en
General
-
Target
847fc5cbe3c96731f0023f15a027c3aac486b194201c78bdd89b6d4f578eeedf
-
Size
67KB
-
MD5
6d3d401da5cd65b8f0d91090c5bd0530
-
SHA1
b01c08636d82019e8f692328271b5c31a53a1703
-
SHA256
847fc5cbe3c96731f0023f15a027c3aac486b194201c78bdd89b6d4f578eeedf
-
SHA512
0e5de4defcd5d29f69d0006273878b55ec18e1e2ee64975ad67c12c3df440c60566538f67e968c8556d36f5cd7b7092da5c3c2e7bf97cefc8dd4a4372ae8eecc
-
SSDEEP
1536:FyrTg4O69U6RbftP8qPeY++34vKW7YRfzQ4XXSbK67:0JO9aqqmY++qYRfM4XXSG67
Malware Config
Signatures
Files
-
847fc5cbe3c96731f0023f15a027c3aac486b194201c78bdd89b6d4f578eeedf.exe windows x86
2e699acef11594952241ad8c16efd5ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringA
LoadIconA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
SetWindowTextA
SendMessageA
DefWindowProcA
PostMessageA
CreateWindowExA
ShowWindow
UpdateWindow
kernel32
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
SizeofResource
GetDateFormatA
GetTimeFormatA
FindResourceA
LockResource
LoadResource
LoadLibraryA
lstrcpyA
SetLastError
LCMapStringW
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
LCMapStringA
comctl32
InitCommonControlsEx
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ