Static task
static1
Behavioral task
behavioral1
Sample
68ba8edf5ab3502f9c881888d6a37cbaad2941bf29c486c87ff52e9ff53fbceb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68ba8edf5ab3502f9c881888d6a37cbaad2941bf29c486c87ff52e9ff53fbceb.exe
Resource
win10v2004-20220812-en
General
-
Target
68ba8edf5ab3502f9c881888d6a37cbaad2941bf29c486c87ff52e9ff53fbceb
-
Size
153KB
-
MD5
a0d53338ccf6eebb40f88d1edfc7aef0
-
SHA1
89d5b631cd1bb79615e3fac0345d1d129cad0334
-
SHA256
68ba8edf5ab3502f9c881888d6a37cbaad2941bf29c486c87ff52e9ff53fbceb
-
SHA512
7d3a3267d8e50049427dfa2f9c8f36385c5565f90b6fd9688d094b2d430dbe6f62a77a0349024bc72fcab7fa84bb139ebc878833d62d3e8586eadbcef4cb9bef
-
SSDEEP
3072:EI4fNVMrN4PFCl29QJbdXEJA7jloADJVrVd3WE9EoR:wO5FbXE8zWEWk
Malware Config
Signatures
Files
-
68ba8edf5ab3502f9c881888d6a37cbaad2941bf29c486c87ff52e9ff53fbceb.exe windows x86
1b3e6bbed714e80ca21321543a7efc6a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
user32
LoadCursorW
LoadIconA
LoadIconW
RegisterClassW
SetFocus
GetWindowRect
shlwapi
PathFindExtensionA
kernel32
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
LoadLibraryA
QueryPerformanceCounter
VirtualProtect
lstrcatW
lstrlenA
ntdll
RtlInitUnicodeString
RtlUnhandledExceptionFilter
NtClose
winmm
waveOutPrepareHeader
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
RealizePalette
SelectObject
SelectPalette
SetTextColor
GetDeviceCaps
Sections
AUTO Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ