Static task
static1
Behavioral task
behavioral1
Sample
c7aa29295ba6eb7814dfaf91ecc65ff9532e4de01323e579ff05417f88d4d97a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7aa29295ba6eb7814dfaf91ecc65ff9532e4de01323e579ff05417f88d4d97a.exe
Resource
win10v2004-20220812-en
General
-
Target
c7aa29295ba6eb7814dfaf91ecc65ff9532e4de01323e579ff05417f88d4d97a
-
Size
74KB
-
MD5
470c008d721a22264330993a8cf3da50
-
SHA1
7754c2993b930437260009ca22b278c2cb35caae
-
SHA256
c7aa29295ba6eb7814dfaf91ecc65ff9532e4de01323e579ff05417f88d4d97a
-
SHA512
f95b32fbfc5c7cac2b05ee6b698deba6894a7b7629081060225a7814aac707bb4d676e60a5a6f006db5b4c10c57d05bcd7fb68a6e70e7a6f92664098d13f395b
-
SSDEEP
1536:XMh+PCoAcxHbCi1Rf/MM3tmR9mSgNsUlfayRgT9j0pei2885orze9WfI02:XyMCoAaDSgNsefaEpe98oon0
Malware Config
Signatures
Files
-
c7aa29295ba6eb7814dfaf91ecc65ff9532e4de01323e579ff05417f88d4d97a.exe windows x86
22d3476a93f81fac3c39bf88d6aef2ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
DeleteFileA
lstrcatA
lstrcpyA
ExitProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
VirtualAlloc
HeapAlloc
LoadLibraryA
SetFilePointer
CreateFileA
ReadFile
GetStartupInfoA
GetCommandLineA
GetVersion
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
HeapDestroy
GetACP
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
HeapFree
VirtualFree
RtlUnwind
WriteFile
GetLastError
oleaut32
SysFreeString
ole32
CoUninitialize
CoInitialize
CoCreateInstance
user32
EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA
comctl32
ord17
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ycixyml Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE