Static task
static1
Behavioral task
behavioral1
Sample
15d08eefda7ce33d35f74dfcd83d0dafca57cb6704f9c8fee2a3a2b77f2d155b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
15d08eefda7ce33d35f74dfcd83d0dafca57cb6704f9c8fee2a3a2b77f2d155b.exe
Resource
win10v2004-20220812-en
General
-
Target
15d08eefda7ce33d35f74dfcd83d0dafca57cb6704f9c8fee2a3a2b77f2d155b
-
Size
3.0MB
-
MD5
d8732cc0d97748f9a5a72bdeb379e39b
-
SHA1
3ccd40bd5796965a943fd68248a56439caef6cc2
-
SHA256
15d08eefda7ce33d35f74dfcd83d0dafca57cb6704f9c8fee2a3a2b77f2d155b
-
SHA512
8967c877c2000b77681e39996f0665e0722aced9f748be732b44da6dad52702930e10ff39a3f2eec222a02c6d44eac02ddedb7ae3eba6b22cc4a1c216048c116
-
SSDEEP
49152:wLPTUpBPnweAsTI1Tbd9UvuIdiw5YFCxyT5FBPVJiqS//t:woBPwVTbdKvuIdi+YQx4JVwt
Malware Config
Signatures
Files
-
15d08eefda7ce33d35f74dfcd83d0dafca57cb6704f9c8fee2a3a2b77f2d155b.exe windows x86
2e6dec782efa468f7d58d61b8fe07a33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetSystemDirectoryA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
GetProcAddress
CreateFileA
CloseHandle
SetErrorMode
user32
MessageBoxA
EnumWindows
wsprintfA
advapi32
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
msvcrt
atol
_except_handler3
sprintf
printf
atoi
free
strncpy
strlen
malloc
Sections
0000001 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000002 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000003 Size: 16KB - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000004 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
0000006 Size: 52KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000007 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE