Static task
static1
Behavioral task
behavioral1
Sample
23dc589194e4828c851973ed746a0801936a965c3115c974a326f8e2c3433069.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23dc589194e4828c851973ed746a0801936a965c3115c974a326f8e2c3433069.exe
Resource
win10v2004-20220812-en
General
-
Target
23dc589194e4828c851973ed746a0801936a965c3115c974a326f8e2c3433069
-
Size
140KB
-
MD5
815514cc9f9572c34c9a5828fc0dd160
-
SHA1
47f0fe7eaeb1578899fc1104a64112c1a886132d
-
SHA256
23dc589194e4828c851973ed746a0801936a965c3115c974a326f8e2c3433069
-
SHA512
e1504b87be35f397f3779fc34a29eaeb095353c1c4eebc4b327973c7fef709f38a6b76e12bd100001d784900dfd7836d27c852fa95edfe62871ca5e3b3475571
-
SSDEEP
1536:wSPXBNwja80oLsBBdLbtOrg2ebd01irqpP+y7r0b1fSj:wSPBbmsbxUzejoVr0bV
Malware Config
Signatures
Files
-
23dc589194e4828c851973ed746a0801936a965c3115c974a326f8e2c3433069.exe windows x86
2374f3b3dcfe29241c06cd4f9d02161c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualQuery
QueryPerformanceCounter
GetCPInfo
GetStartupInfoA
GetCommandLineA
ExitProcess
lstrcpyA
lstrcatA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTickCount
lstrlenA
advapi32
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey
user32
PostQuitMessage
EndPaint
BeginPaint
UnregisterClassA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
MessageBoxA
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DefWindowProcA
DestroyWindow
ntdll
memset
memcpy
RtlClearBits
RtlSetBits
gdi32
TextOutA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icon Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE