Static task
static1
Behavioral task
behavioral1
Sample
68749d01439d744f41c2e084b36d52eb967d82b8faf61a3a0361f70a294dc288.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68749d01439d744f41c2e084b36d52eb967d82b8faf61a3a0361f70a294dc288.exe
Resource
win10v2004-20220901-en
General
-
Target
68749d01439d744f41c2e084b36d52eb967d82b8faf61a3a0361f70a294dc288
-
Size
275KB
-
MD5
636fc40dc5977735e76d89aa94c74acf
-
SHA1
1b168837e3ffb29ddd066f19aea08274a2114597
-
SHA256
68749d01439d744f41c2e084b36d52eb967d82b8faf61a3a0361f70a294dc288
-
SHA512
33fc07120aa7986b257aeadd4f58e421ea1254370bde677e14f8f525a23510a239210128739d66a3540fc5edb709443eef6293d90333f74b65352abfce105b72
-
SSDEEP
6144:GNIRXaucrgbzChr2ItFdZ8/JHPau7UYEHNf9ZqiJElaICPuPX:GNI0uggbzChbtp8hiu1EHNlgbeA
Malware Config
Signatures
Files
-
68749d01439d744f41c2e084b36d52eb967d82b8faf61a3a0361f70a294dc288.exe windows x86
64d0f84e7d2194f8e386815828d4c8cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowThreadProcessId
DialogBoxParamA
GetActiveWindow
IsCharAlphaA
MessageBoxA
EnumWindows
SetWindowTextA
SetDlgItemTextW
ole32
CoGetCallerTID
comctl32
InitCommonControlsEx
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
HeapFree
FindResourceA
GetStartupInfoA
InitializeCriticalSection
HeapDestroy
SetFileAttributesA
LoadResource
IsValidLocale
GetDateFormatA
GetTickCount
GetProcAddress
FreeLibrary
LoadLibraryA
HeapAlloc
ExitProcess
IsValidLanguageGroup
HeapCreate
IsBadReadPtr
LocalFree
LocalAlloc
DeleteCriticalSection
Sections
.text Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ