Static task
static1
Behavioral task
behavioral1
Sample
0197c1ab88b541eb9deb0c6987dba10e8d40345f0d356296683e8e287639e7c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0197c1ab88b541eb9deb0c6987dba10e8d40345f0d356296683e8e287639e7c6.exe
Resource
win10v2004-20220812-en
General
-
Target
0197c1ab88b541eb9deb0c6987dba10e8d40345f0d356296683e8e287639e7c6
-
Size
56KB
-
MD5
7136deaeb15ba4696c228403897f4ddf
-
SHA1
81f6a88f8d96619eaf661a0853f8201491472605
-
SHA256
0197c1ab88b541eb9deb0c6987dba10e8d40345f0d356296683e8e287639e7c6
-
SHA512
68d28c2f2aae0737c4a27d8a37718695009433665a3ca552a20dfb4eccd208a52f7f238348db3f12cc31298227ddaa11b165f5677dd7ff8d14a92570a5cf5fee
-
SSDEEP
1536:aZUduusNK5c6YWRobAjrBNo8Y4+escZjHgQ8yHTUwpmaWN:aZ8YK5c6XRIAjrBNo8Y4+Ab8yzUwpmaI
Malware Config
Signatures
Files
-
0197c1ab88b541eb9deb0c6987dba10e8d40345f0d356296683e8e287639e7c6.exe windows x86
f1e2aa94e21b7ea0d29a683f40e2b5df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetConsoleAliasA
GetACP
Sleep
GetCalendarInfoA
GetModuleHandleA
LocalLock
GetLastError
FindAtomA
CreateFileMappingA
FreeEnvironmentStringsA
LoadLibraryExA
CloseHandle
CreateFileA
GetConsoleCP
FindClose
LocalFree
GlobalUnlock
TlsGetValue
WaitForMultipleObjects
user32
CascadeWindows
IsWindow
GetDC
GetIconInfo
SetFocus
CallWindowProcA
GetDlgItem
DrawEdge
CreateDialogParamA
DrawTextA
DispatchMessageA
DefWindowProcA
GetMessageA
MessageBoxA
msasn1
ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecSkip
ASN1BEREncLength
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ