8GYl5DOL3ezC1E@12
Static task
static1
Behavioral task
behavioral1
Sample
b70b7d805aeeb1ec3613b7fd005ef6fb794b2622478c1dded2d99990ad33b8f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b70b7d805aeeb1ec3613b7fd005ef6fb794b2622478c1dded2d99990ad33b8f6.exe
Resource
win10v2004-20220812-en
General
-
Target
b70b7d805aeeb1ec3613b7fd005ef6fb794b2622478c1dded2d99990ad33b8f6
-
Size
208KB
-
MD5
77c2ab6a824f9f216782c562ae7ec42a
-
SHA1
f1e52b9e88c2fa62ce607ad208b38d0a005fb677
-
SHA256
b70b7d805aeeb1ec3613b7fd005ef6fb794b2622478c1dded2d99990ad33b8f6
-
SHA512
9db7ed5bed95863003b668c32bc34775875244a33458c684cfe49ed6aaed248819d8f84d28ae26338d371f617e1cd9c94690539f5b3d08639574539f0e83057f
-
SSDEEP
3072:ShsNsJKOreBP81x9Y5WregK7uG9Bo+ftW1IVEQU:csHA/9qWq37uG9Bo2h
Malware Config
Signatures
Files
-
b70b7d805aeeb1ec3613b7fd005ef6fb794b2622478c1dded2d99990ad33b8f6.exe windows x86
2b640151b78f5f71d221ec072efb729a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
CloseHandle
LoadLibraryA
VirtualAllocEx
Sleep
ExitProcess
user32
WindowFromPoint
UnregisterClassA
GetWindowTextLengthA
GetMenu
GetCapture
EnableWindow
GetCursor
UpdateWindow
WaitMessage
shlwapi
SHQueryValueExA
PathIsDirectoryA
SHDeleteKeyA
SHSetValueA
SHDeleteValueA
comdlg32
FindTextA
Exports
Exports
Sections
CODE Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fpdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 668B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eddata Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ