Static task
static1
Behavioral task
behavioral1
Sample
94f156267cc05c9e6254bb86dee714b54bb103089cfbd893c03780241ea7af0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94f156267cc05c9e6254bb86dee714b54bb103089cfbd893c03780241ea7af0a.exe
Resource
win10v2004-20220901-en
General
-
Target
94f156267cc05c9e6254bb86dee714b54bb103089cfbd893c03780241ea7af0a
-
Size
35KB
-
MD5
29bd9397d77752f8bce61079bc8858b0
-
SHA1
4564277c0bb4b28e0c76da3bf66b2dd4751574cb
-
SHA256
94f156267cc05c9e6254bb86dee714b54bb103089cfbd893c03780241ea7af0a
-
SHA512
06e50a8b8233bcf850443455cacc865dd39aabf5e2d6386b808318424b5f1b3312d5834da03f40411dba1de96145f9cf1b0abe5a0fb6e2a1c92342133fca82b7
-
SSDEEP
384:o5sv8DEaYoo0wwWLQFFHw/1ibPL2tII7brRA9xtTjtTzJs3CDL:8Ea2QF6iuz7bqtXdJs3CP
Malware Config
Signatures
Files
-
94f156267cc05c9e6254bb86dee714b54bb103089cfbd893c03780241ea7af0a.exe windows x86
dcfe29ddd213f386eab4929741d68c6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
PostQuitMessage
TranslateMessage
EndPaint
BeginPaint
DestroyWindow
DefWindowProcA
PostMessageA
SendMessageA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
LoadStringA
GetMessageA
CreateWindowExA
ShowWindow
UpdateWindow
kernel32
GetModuleHandleA
LoadLibraryA
GetCurrentDirectoryA
GetStartupInfoA
GetLocalTime
LoadResource
LockResource
FindResourceA
GetTimeFormatA
GetDateFormatA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
msvcrt
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
??2@YAPAXI@Z
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data2 Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ