Static task
static1
Behavioral task
behavioral1
Sample
914d6f63df7d3711bb5bc45ffc8a1e11dbcbc03c3056ad8aaf5af34343b0becf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
914d6f63df7d3711bb5bc45ffc8a1e11dbcbc03c3056ad8aaf5af34343b0becf.exe
Resource
win10v2004-20220901-en
General
-
Target
914d6f63df7d3711bb5bc45ffc8a1e11dbcbc03c3056ad8aaf5af34343b0becf
-
Size
637KB
-
MD5
64fe22360bb33cb06c0a56f4c112ad92
-
SHA1
19c0bcaac8d2c93b3163aa3fa9d764d3c749d4c9
-
SHA256
914d6f63df7d3711bb5bc45ffc8a1e11dbcbc03c3056ad8aaf5af34343b0becf
-
SHA512
9181bac2a2bdb4310801dae7c16783dd6146a4cc3f0bf30281117a5b397cb0b7d9c8604f955b147c6c2aa706b6080fd951b86245be1ab9a8a99516d37c066685
-
SSDEEP
12288:pWDwZyWFNcU2j2IK66uxQf0XCFo20551DfE2RRU/pGV44Vg69MwbO+kPzd1lHYix:PFNcrj2INQf0XCypfE2fUkg6vbKd3Y+L
Malware Config
Signatures
Files
-
914d6f63df7d3711bb5bc45ffc8a1e11dbcbc03c3056ad8aaf5af34343b0becf.exe windows x86
b935f06188d83f117fe325413a596ae2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
GetAtomNameA
GlobalUnlock
CompareFileTime
GetConsoleCP
GetSystemDefaultLangID
HeapReAlloc
LoadLibraryExA
WaitForMultipleObjects
InterlockedExchange
GetCommandLineA
GetTickCount
lstrlenA
GetModuleHandleA
HeapCreate
GetStdHandle
CloseHandle
SetConsoleCP
WaitForSingleObject
VirtualProtect
GetVersion
user32
GetDlgItem
CopyImage
DestroyMenu
GetKeyboardLayout
GetKeyState
DragObject
GetCursorInfo
DispatchMessageA
DialogBoxParamA
InsertMenuA
SetWindowPos
EnableScrollBar
IsDialogMessage
CreateMenu
InvertRect
FindWindowA
DrawCaption
SetScrollInfo
FillRect
SetPropA
CreateIcon
advapi32
RegEnumValueA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyA
RegCreateKeyExA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ