Static task
static1
Behavioral task
behavioral1
Sample
ac74bd8473761a3c9c8fa88c76b7d9e982559429a4a1fd2afac9f2acbed45d97.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ac74bd8473761a3c9c8fa88c76b7d9e982559429a4a1fd2afac9f2acbed45d97.exe
Resource
win10v2004-20220812-en
General
-
Target
ac74bd8473761a3c9c8fa88c76b7d9e982559429a4a1fd2afac9f2acbed45d97
-
Size
384KB
-
MD5
6474ca862a49966ae6277f8a94283a70
-
SHA1
dd9954515287ef23bc771eb06082819141d8ba14
-
SHA256
ac74bd8473761a3c9c8fa88c76b7d9e982559429a4a1fd2afac9f2acbed45d97
-
SHA512
7d521c6f1415fbaf7f8594c6890cfd3044464e7b6623b91cd9598181bf37a9f545aa61a0422ffffd76948fd39dcf31f23ae08a0ef19532eb8d2e5f8411fd05ed
-
SSDEEP
12288:3E4Skfuk5k9820R9Hf9Bkd/iIg4qOQviUynbFI:3E4lbW82wF2Bi/9NObFI
Malware Config
Signatures
Files
-
ac74bd8473761a3c9c8fa88c76b7d9e982559429a4a1fd2afac9f2acbed45d97.exe windows x86
00276c5fd7867bc7304aa810ad8e2f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
RegEnumValueU
RegDeleteValueU
RegOpenKeyExU
RegCreateKeyExU
RegSetValueExU
kernel32
CreateFileW
InterlockedIncrement
GetTickCount
Sleep
HeapCreate
GetSystemDirectoryW
VirtualFree
ReadFile
GetStdHandle
CloseHandle
gdi32
UnrealizeObject
TextOutW
TextOutA
StretchDIBits
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixelV
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
version
VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
Sections
.text Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 379KB - Virtual size: 879KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE