?PoisoningSymptomsIncludeHeat@@YG_KPAU_PSP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
1dc79efc5be217b016a513269b6fcd4ce93bd282a72f87dbf05f0dc830a660a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1dc79efc5be217b016a513269b6fcd4ce93bd282a72f87dbf05f0dc830a660a2.exe
Resource
win10v2004-20220812-en
General
-
Target
1dc79efc5be217b016a513269b6fcd4ce93bd282a72f87dbf05f0dc830a660a2
-
Size
176KB
-
MD5
698c666f3d5443bbba81897e64df11cd
-
SHA1
3bbff9604412c3350b364a3f29adad6ddce0272c
-
SHA256
1dc79efc5be217b016a513269b6fcd4ce93bd282a72f87dbf05f0dc830a660a2
-
SHA512
c054f781ee8ea312f479c52ee82a98b586ac59b4c8654da45d49b23be506751ffe1fb1a0eca6d68cd652877a3ec2758074f6459edaa5b0daeda9dd6c4e21ce40
-
SSDEEP
3072:jZyidHpNlj2HupUV+ZWWd9tXI/02DpNt2ZAf7if5FRyfpkqPtwMw+syfpkw:jZVxdj2cG+duNwZ1f5jyWqPub+syWw
Malware Config
Signatures
Files
-
1dc79efc5be217b016a513269b6fcd4ce93bd282a72f87dbf05f0dc830a660a2.exe windows x86
316ec84573f64ea6d383d1c89a90776d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetScrollPos
LoadIconA
IsCharAlphaNumericW
GetKeyState
kernel32
OpenMutexA
Exports
Exports
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE