Static task
static1
Behavioral task
behavioral1
Sample
ba2310584976c0dd7f88eeb734ba0040bc861ec2a35cfdf7429bbf78ab9d8c1c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba2310584976c0dd7f88eeb734ba0040bc861ec2a35cfdf7429bbf78ab9d8c1c.exe
Resource
win10v2004-20220812-en
General
-
Target
ba2310584976c0dd7f88eeb734ba0040bc861ec2a35cfdf7429bbf78ab9d8c1c
-
Size
62KB
-
MD5
6019f581c9eb30c01d145d807212b070
-
SHA1
c49f7fc6c9a8a57fe1f9092d783bab96739a4dff
-
SHA256
ba2310584976c0dd7f88eeb734ba0040bc861ec2a35cfdf7429bbf78ab9d8c1c
-
SHA512
70ae28dc6b8aee60a34fe3f6213a3a348f4da8447c8c2959c6105f7deb23584ddcc312df04ccde2aef76c9afdbd14e1127b2f77e83e0ba03a9777bf20e1fa47a
-
SSDEEP
768:7rQpn0BP0Vwd3iWAih+MjendpdbtQ3k+bqfj1kRojmm1djpHXTSEaEAM9TBuv93v:PunC0U3iW3Sdpdbl8WjOGXiFJ5V/R06
Malware Config
Signatures
Files
-
ba2310584976c0dd7f88eeb734ba0040bc861ec2a35cfdf7429bbf78ab9d8c1c.exe windows x86
1631ce230cfbf85a7b52dca855d48d65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClipboardData
GetClassNameA
LoadCursorA
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetDlgItemTextA
ToUnicode
CharLowerBuffA
SetThreadDesktop
GetForegroundWindow
PeekMessageA
GetWindowTextA
DrawIcon
ExitWindowsEx
MsgWaitForMultipleObjects
GetDlgItem
GetCursorPos
advapi32
CryptGetHashParam
CryptReleaseContext
RegDeleteValueA
CryptDestroyHash
CryptAcquireContextW
DuplicateTokenEx
RegQueryValueExA
CryptCreateHash
RegEnumKeyExA
RegCreateKeyExA
CryptHashData
RegSetValueExA
shlwapi
PathFileExistsW
SHDeleteKeyA
StrStrW
PathFindFileNameW
wnsprintfA
PathCombineW
wvnsprintfA
wvnsprintfW
kernel32
TryEnterCriticalSection
CopyFileW
VirtualAlloc
CloseHandle
VirtualProtect
GetLastError
GetFileAttributesA
lstrcmpiA
GetAtomNameW
lstrcpyW
lstrcatA
WideCharToMultiByte
lstrcpynW
OpenMutexW
GetModuleHandleA
GlobalUnlock
GetVersionExW
EnterCriticalSection
GetFileTime
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE