Static task
static1
Behavioral task
behavioral1
Sample
29c97de39d250297081cfacee3483db128dab5b0ceda97746c45489c2ab75f2e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29c97de39d250297081cfacee3483db128dab5b0ceda97746c45489c2ab75f2e.exe
Resource
win10v2004-20220812-en
General
-
Target
29c97de39d250297081cfacee3483db128dab5b0ceda97746c45489c2ab75f2e
-
Size
637KB
-
MD5
1797d5ecb7788b739c803a3dadba1f14
-
SHA1
62413b8d642602a8518d283ac00ff9363cbfdc4b
-
SHA256
29c97de39d250297081cfacee3483db128dab5b0ceda97746c45489c2ab75f2e
-
SHA512
d77b33c6cd8f110e9fff73c75d723847cece826e1dac7bd9b41aac645d117e9c55de85eff92db1718479f0db5c668689d2425a01281cf9630357f7eaa604695d
-
SSDEEP
12288:mR1+jSpEoRzUA4Usj5sWUznwnprl76IkNjfCJaqYYNwJAULO4ywEWYd0:cEjSpEoRzU3UEgwnpR76IkEaMNwJAJel
Malware Config
Signatures
Files
-
29c97de39d250297081cfacee3483db128dab5b0ceda97746c45489c2ab75f2e.exe windows x86
ca7a503e8efe842ffd1042cafc0b5365
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
FindAtomA
GetModuleHandleA
GetVersion
lstrlenA
HeapReAlloc
TlsGetValue
HeapWalk
VirtualProtect
TlsFree
GlobalUnlock
LoadLibraryA
WaitForSingleObject
GetTickCount
GetAtomNameA
GetConsoleCP
CompareFileTime
GetACP
GetStdHandle
InterlockedExchange
GetProfileIntA
user32
GetSubMenu
GetKeyboardLayout
MessageBoxA
PaintDesktop
InflateRect
LoadIconA
SubtractRect
EnableScrollBar
EqualRect
GetMenu
GetDlgItem
CreateCaret
DialogBoxParamA
ShowWindow
DestroyMenu
GetScrollRange
PostMessageA
UpdateWindow
SetPropA
PostQuitMessage
GetMenuStringA
TranslateMessage
GetWindowTextA
SetWindowPos
DispatchMessageA
CopyRect
ModifyMenuA
InsertMenuA
msi
MsiEnumProductsA
MsiDoActionA
MsiCloseHandle
MsiEnumClientsA
MsiGetMode
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ