Static task
static1
Behavioral task
behavioral1
Sample
92ccb2ee12444d1de489166af789a0d84549c58b8ee2db8536783322811ece50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92ccb2ee12444d1de489166af789a0d84549c58b8ee2db8536783322811ece50.exe
Resource
win10v2004-20220812-en
General
-
Target
92ccb2ee12444d1de489166af789a0d84549c58b8ee2db8536783322811ece50
-
Size
160KB
-
MD5
655271a0015c6dc5f303e4e9225c5a60
-
SHA1
5b22e2a7230d7bd5c7986a218c4a75ca087b377e
-
SHA256
92ccb2ee12444d1de489166af789a0d84549c58b8ee2db8536783322811ece50
-
SHA512
c2da29378c2eb6c5d69b9d6b9378932329437790c848e804c50f28634d389b0cb59bcb9db5dbbfd80d57e0e9702258529565d1dbd5e966d5c3667ab22e50697b
-
SSDEEP
3072:jJfBsquDi/v1gRtH0DnK1DfcqWI1u/yX6QbwS:jjsquDbHUnK1bcfgw
Malware Config
Signatures
Files
-
92ccb2ee12444d1de489166af789a0d84549c58b8ee2db8536783322811ece50.exe windows x86
f80125fc7d895730bcc3b25ea4c7a1f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegDeleteValueA
RegEnumKeyExA
RegLoadKeyA
user32
SetWindowLongA
DrawMenuBar
CreateIcon
GetMenu
CheckMenuItem
EnumChildWindows
EqualRect
RegisterClassA
EnableWindow
CreatePopupMenu
BeginPaint
IsMenu
GetDCEx
IsChild
DefWindowProcA
DrawEdge
GetSubMenu
GetFocus
GetCapture
GetActiveWindow
ClientToScreen
comctl32
ImageList_Destroy
msvcrt
wcsncmp
atol
log10
exit
mbstowcs
memmove
malloc
wcstol
calloc
memcmp
clock
strcmp
exp
sprintf
memcpy
swprintf
wcschr
sqrt
oleaut32
OleLoadPicture
SafeArrayGetUBound
RegisterTypeLib
GetErrorInfo
kernel32
SetEndOfFile
HeapFree
GetStringTypeA
LocalFree
GetCurrentProcess
LoadLibraryExA
GetLastError
lstrcpynA
lstrcmpiA
GetCPInfo
GetCurrentProcessId
GetCurrentThread
FreeLibrary
ExitThread
GetVersionExA
VirtualAllocEx
ExitProcess
LoadLibraryA
GetModuleHandleA
GlobalAlloc
shlwapi
PathFileExistsA
PathGetCharTypeA
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA
version
GetFileVersionInfoSizeA
VerFindFileA
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE