Static task
static1
Behavioral task
behavioral1
Sample
d4ae2ea828689d11d35af855f0843a5ce941ce275f4edfdf9de69a2344e1c6b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4ae2ea828689d11d35af855f0843a5ce941ce275f4edfdf9de69a2344e1c6b8.exe
Resource
win10v2004-20220812-en
General
-
Target
d4ae2ea828689d11d35af855f0843a5ce941ce275f4edfdf9de69a2344e1c6b8
-
Size
217KB
-
MD5
646814b416f1eb7e005bb122d7d232ac
-
SHA1
2e6c7a5eb5503dd2e878f8b1b785213785813e8a
-
SHA256
d4ae2ea828689d11d35af855f0843a5ce941ce275f4edfdf9de69a2344e1c6b8
-
SHA512
48079d0b1c3f907cf451c5ddaa5ffd4ef8a524f2b454ec07266c824750f95b5a39c39fbe333ec92437379e739530ca584291a8916c24e59b4dea5f729dee0320
-
SSDEEP
6144:KgiUQrleRHb40wgneUBk6TMSoq+duaWg+WLeL/v:KoQry4dgeUG5SoN/E+yv
Malware Config
Signatures
Files
-
d4ae2ea828689d11d35af855f0843a5ce941ce275f4edfdf9de69a2344e1c6b8.exe windows x86
7c166bef72fee8c0715e1e3043793ecb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess
user32
CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA
advapi32
RegDeleteKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegSetValueA
RegDeleteValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
Sections
.text Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ