Static task
static1
Behavioral task
behavioral1
Sample
b55ae6d4705877ef1ab0e4de715144df7e09f9d2e03cfc8c5f28a3b5bfcaff27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b55ae6d4705877ef1ab0e4de715144df7e09f9d2e03cfc8c5f28a3b5bfcaff27.exe
Resource
win10v2004-20220812-en
General
-
Target
b55ae6d4705877ef1ab0e4de715144df7e09f9d2e03cfc8c5f28a3b5bfcaff27
-
Size
392KB
-
MD5
66e9e97f58653fd0a3de1e8c9612e0bd
-
SHA1
bb87b185ef4a7614152e8f94ee16bf4cd257ac80
-
SHA256
b55ae6d4705877ef1ab0e4de715144df7e09f9d2e03cfc8c5f28a3b5bfcaff27
-
SHA512
97258ba3fcf5f4e5b6800a7b499c71c6df033850f97043846bed725e72625e5fdb986394a490ff37c5fca4aabe390e685efd7b8b6c7b5921d46154bb97df2c1b
-
SSDEEP
12288:AuQiFyVFs9I0Rd8OBDGIFaw1KfBQumE1tO3JD/eqq2jRr71WtF:A2FW+9I0wOZGIH6zPo/eqp9rhc
Malware Config
Signatures
Files
-
b55ae6d4705877ef1ab0e4de715144df7e09f9d2e03cfc8c5f28a3b5bfcaff27.exe windows x86
51cc867a15a34da8540b5d70d2ba2951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
InterlockedIncrement
Sleep
VirtualFree
InterlockedIncrement
Sleep
VirtualFree
msimg32
AlphaBlend
GradientFill
ole32
OleDraw
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
IsValidPtrIn
IsValidPtrOut
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoGetMalloc
CoUninitialize
CoInitialize
advapi32
SetTokenInformation
SetSecurityDescriptorDacl
RegSetValueExW
RegSetValueExA
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 877B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ