Static task
static1
Behavioral task
behavioral1
Sample
0f679dd7b85dcbd486f41a02269025e4113e11b8ac24089211d188f1ddf8397c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f679dd7b85dcbd486f41a02269025e4113e11b8ac24089211d188f1ddf8397c.exe
Resource
win10v2004-20220812-en
General
-
Target
0f679dd7b85dcbd486f41a02269025e4113e11b8ac24089211d188f1ddf8397c
-
Size
188KB
-
MD5
664075f1d695296405d5c770c63ae490
-
SHA1
ba318d629a200868ec48d3f78807f8da75ff3e65
-
SHA256
0f679dd7b85dcbd486f41a02269025e4113e11b8ac24089211d188f1ddf8397c
-
SHA512
34205aec8f275373c5b864db478cb905c688cbd3e47d061cd26497ffff358849c7077eee35b3c784daedc34365b6c1d99d82a12df10ccae2e75603e54b865126
-
SSDEEP
3072:vp6by25kLoTrP4+CTdONKxrI5L4k/ZdrvJrUJRxnzDmjh3NaPBIN+DK6P2+N336g:vPGqoTU+GcNKi58kfv1szwNaPY+DTP2I
Malware Config
Signatures
Files
-
0f679dd7b85dcbd486f41a02269025e4113e11b8ac24089211d188f1ddf8397c.exe windows x86
577724350c15937212f586806e9dd4f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA
GetCurrentProcess
LCMapStringA
user32
CloseWindow
wsprintfA
CreateWindowExA
SetWindowLongA
CharLowerBuffA
advapi32
RegDeleteValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegEnumValueA
Sections
.text Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ