Static task
static1
Behavioral task
behavioral1
Sample
d1c2a53edd7942b7af9224883649e59ae0968f2f78e34b00d53a2659591bf732.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d1c2a53edd7942b7af9224883649e59ae0968f2f78e34b00d53a2659591bf732.exe
Resource
win10v2004-20220901-en
General
-
Target
d1c2a53edd7942b7af9224883649e59ae0968f2f78e34b00d53a2659591bf732
-
Size
560KB
-
MD5
7cc10a9048dce94ac1a06f86f3003159
-
SHA1
ecfb4ca3ffe44f1d034c0f6ef3ba398b0fbc8cd8
-
SHA256
d1c2a53edd7942b7af9224883649e59ae0968f2f78e34b00d53a2659591bf732
-
SHA512
51d105ffcf0aded3a0f167ff0c41b480dab8a3709ea4d4c379535684380572a698f5ac2cf6216fb77d722b650aba356537660b5d8aaaf0689a4b7b6d5329ce68
-
SSDEEP
12288:RE8r7GhOL+VQp1w8JQlhuxJ2XZEhxX+L/f9LesC2QlCN:KUsgf1wDkSXZEaLX9LeiX
Malware Config
Signatures
Files
-
d1c2a53edd7942b7af9224883649e59ae0968f2f78e34b00d53a2659591bf732.exe windows x86
98e9a70e800dae50101da53264f601d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
user32
CharLowerBuffA
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
advapi32
RegOpenKeyA
RegEnumValueA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueA
Sections
.text Size: 472KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ