Static task
static1
Behavioral task
behavioral1
Sample
18d783ca68f4f02e2eaaa7230218bff4956e07523c12ebcd068045d7a3f3cf78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18d783ca68f4f02e2eaaa7230218bff4956e07523c12ebcd068045d7a3f3cf78.exe
Resource
win10v2004-20220812-en
General
-
Target
18d783ca68f4f02e2eaaa7230218bff4956e07523c12ebcd068045d7a3f3cf78
-
Size
100KB
-
MD5
658e6d008cbf7fc1f31612b289ba56ad
-
SHA1
6f2e367932f41cd97dd1328928abbce29c2f3ed8
-
SHA256
18d783ca68f4f02e2eaaa7230218bff4956e07523c12ebcd068045d7a3f3cf78
-
SHA512
60329aba70af136ab631789ba5bc4f9773c9a81d096b53d0b1397e57b3332e08b974a9135fcb2754ac789a3a60f7418b732e85db868eaf8bf3548711fdd6f96e
-
SSDEEP
768:qoT+1bCbhfduKeAu050263UP9Yolg5YLvKcTXUuTpEB9MR/XzTaVCFBDB9Xhce23:3I6uJAu050263y1LvvXUuTlzzBqem
Malware Config
Signatures
Files
-
18d783ca68f4f02e2eaaa7230218bff4956e07523c12ebcd068045d7a3f3cf78.exe windows x86
5b10963e4c46793be9da1c2d16589dc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileWithProgressA
FillConsoleOutputCharacterA
ReadConsoleInputA
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
CreateFileA
ExitProcess
user32
SetWindowPos
SetActiveWindow
SetFocus
LoadIconA
LoadCursorA
RegisterClassW
ShowWindow
DialogBoxParamA
CreateWindowExA
GetMessageW
TranslateMessage
DispatchMessageW
GetMessageA
DispatchMessageA
MessageBoxA
CharUpperA
CharNextA
DefWindowProcW
DefWindowProcA
PostQuitMessage
IsZoomed
FindWindowA
GetWindowLongA
SetWindowLongA
IsDlgButtonChecked
EndDialog
RegisterClassA
LoadStringA
CreateWindowExW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueA
comdlg32
GetOpenFileNameA
gdi32
GetStockObject
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ