Static task
static1
Behavioral task
behavioral1
Sample
631c7925ebd2fc5b9f0ee94d4d5323e85ffc11f680d397b76114ae442483527f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
631c7925ebd2fc5b9f0ee94d4d5323e85ffc11f680d397b76114ae442483527f.exe
Resource
win10v2004-20220812-en
General
-
Target
631c7925ebd2fc5b9f0ee94d4d5323e85ffc11f680d397b76114ae442483527f
-
Size
293KB
-
MD5
6ebcca2f13a2b516a0021a17bc77b637
-
SHA1
6af1f07df1a597012496bc5a6ff3d96179f4ba0b
-
SHA256
631c7925ebd2fc5b9f0ee94d4d5323e85ffc11f680d397b76114ae442483527f
-
SHA512
a300e3d77e4a8973d414033f70731d7eeabfcc15c02ab3ffa1b0b444247537e3d140e838bf4cf1071a9d1e6d70285af55f8f8aae595469a9d603408c3b79bf6f
-
SSDEEP
6144:PGkJRmfyRK+Zx09nKVdIDJ/tdJDpGVrLA/5A4PLRfRcw2Bpi5:PGogWK+Z4nKIjZGBLI735
Malware Config
Signatures
Files
-
631c7925ebd2fc5b9f0ee94d4d5323e85ffc11f680d397b76114ae442483527f.exe windows x86
8a235887ed1b875f8c1bc6890e3ee7f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA
ExitProcess
user32
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA
advapi32
RegSetValueA
RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey
Sections
.text Size: 153KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ