Ox12345678
Static task
static1
Behavioral task
behavioral1
Sample
1dffb7c38ab30007fd1dde7c79cba0fe8bfe0f501eaf365eee9072f12c01c331.exe
Resource
win7-20220901-en
General
-
Target
1dffb7c38ab30007fd1dde7c79cba0fe8bfe0f501eaf365eee9072f12c01c331
-
Size
1.4MB
-
MD5
2479b91fd067536d6ecb2d64de153d80
-
SHA1
473111e15d400dfa7817d6cfa6496b36c4729aa0
-
SHA256
1dffb7c38ab30007fd1dde7c79cba0fe8bfe0f501eaf365eee9072f12c01c331
-
SHA512
ba5a99d41a2f1e42bdac81a5fa1718baf00f26cc28bd25c24a697e754e3c9357e1d15265294764ff2b1f5acf7382c7e395db9d8ec11a2f9f8207c197e97d4633
-
SSDEEP
24576:sbcfFNH48xUfKf1EAAMbSvwpot//LEgJWOxI3O74N0y5CCeXpobLktTw:LzY8xUfKf1EAAVvwQTjJWgL4N0C8uLes
Malware Config
Signatures
Files
-
1dffb7c38ab30007fd1dde7c79cba0fe8bfe0f501eaf365eee9072f12c01c331.exe windows x86
2edc1c54f961df9901f92487cef16292
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
ExitProcess
advapi32
RegCreateKeyA
gdi32
CreateCompatibleDC
user32
MessageBoxA
version
GetFileVersionInfoA
shfolder
SHGetFolderPathW
comctl32
InitCommonControlsEx
ole32
CoCreateInstance
comdlg32
GetSaveFileNameW
shell32
CommandLineToArgvW
oleaut32
SysAllocString
Exports
Exports
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
stxt774 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt371 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE