Static task
static1
Behavioral task
behavioral1
Sample
daeb945f7838121dd0932d9dd880916ccfafed3a5277e9f7eaa9870de51ad923.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
daeb945f7838121dd0932d9dd880916ccfafed3a5277e9f7eaa9870de51ad923.exe
Resource
win10v2004-20220901-en
General
-
Target
daeb945f7838121dd0932d9dd880916ccfafed3a5277e9f7eaa9870de51ad923
-
Size
40KB
-
MD5
60341731f2c38fe6de3a7b8ad38543e0
-
SHA1
2d3039d976d496a6484953038c65c3e842edfa70
-
SHA256
daeb945f7838121dd0932d9dd880916ccfafed3a5277e9f7eaa9870de51ad923
-
SHA512
2ee1409ac3e0e55353c2db3e7fbf6b70eac1e2fcb678cdb2ed41afa7798aea8e2139098871ba3157d97898fbf0a456992a1918533327ba726da45f3f622d9c35
-
SSDEEP
768:iAIa868R8Z8W88m8E8Qvp7inPddNaZ/x13jRff+nvcErElL4aokrbTTwClKfmA3J:iMzq+ERpfvp7inPXNaZ/H3jRf2ntA+a4
Malware Config
Signatures
Files
-
daeb945f7838121dd0932d9dd880916ccfafed3a5277e9f7eaa9870de51ad923.exe windows x86
9a576b6ab7347f7402ed11d66a21d6b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strlen
strcpy
strncpy
strcat
_CItanh
memcpy
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
GetCurrentThreadId
GetCurrentProcessId
WriteFile
CloseHandle
SetFilePointer
HeapReAlloc
FlushFileBuffers
WriteConsoleA
user32
MessageBoxA
EnableWindow
DefWindowProcA
DestroyWindow
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
UnregisterClassA
LoadCursorA
RegisterClassExA
IsWindowEnabled
GetSystemMetrics
CreateWindowExA
SetWindowLongA
SendMessageA
SetFocus
CreateAcceleratorTableA
SetForegroundWindow
BringWindowToTop
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
GetWindowThreadProcessId
IsWindowVisible
GetForegroundWindow
EnumWindows
SetWindowPos
gdi32
GetStockObject
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
InitCommonControlsEx
ole32
CoInitialize
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ