Static task
static1
Behavioral task
behavioral1
Sample
2dae49b95de0d20de3f7f986b1d88cf862d2f0ce224eee9fbe27d4c6768678be.exe
Resource
win7-20220812-en
General
-
Target
2dae49b95de0d20de3f7f986b1d88cf862d2f0ce224eee9fbe27d4c6768678be
-
Size
340KB
-
MD5
6c0eecac4f0b7e110a4f373aa08cc9a1
-
SHA1
5ed0a0454aa084ccff9cae4bc0c0dff16e70506d
-
SHA256
2dae49b95de0d20de3f7f986b1d88cf862d2f0ce224eee9fbe27d4c6768678be
-
SHA512
696c2d75f1cf1b79b2a1aae82bba8014aad65ddf98a465b2ee05a69a8988a005f9ee930e3a4a67a791557708e04aabf2f95b9e4f6d8cdee0b46230b1fd1174bf
-
SSDEEP
6144:jp4SaTqXjESRV+tYMi32R1kuYNNLTiVMlpUq7Sc+wYspGNNe92vvAkHu:uShXFR0tYMi2Xk3/Z12l8GNN5K
Malware Config
Signatures
Files
-
2dae49b95de0d20de3f7f986b1d88cf862d2f0ce224eee9fbe27d4c6768678be.exe windows x86
d7d3a7473a9e4693c63dfcd5adf582e4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
CreateFileA
GetCurrentProcess
ExitProcess
LCMapStringA
user32
wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
advapi32
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegSetValueA
Sections
.text Size: 320KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ