Static task
static1
Behavioral task
behavioral1
Sample
325e71469bbaa25dfcba0af9d6c0fa7da15c29e974ca51e9979de8017299f377.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
325e71469bbaa25dfcba0af9d6c0fa7da15c29e974ca51e9979de8017299f377.exe
Resource
win10v2004-20220812-en
General
-
Target
325e71469bbaa25dfcba0af9d6c0fa7da15c29e974ca51e9979de8017299f377
-
Size
156KB
-
MD5
900035951d441697d4631584da6385d0
-
SHA1
c89b0b8f4b739a178a6e84c5abfef62d4aabdd81
-
SHA256
325e71469bbaa25dfcba0af9d6c0fa7da15c29e974ca51e9979de8017299f377
-
SHA512
bb4b81ad82328211db67e4506d2713d32a05a31cfce29b78cf13f13b35a6bc0582c4f5250114a84a4ae05b3530ec1126b6db342cdcd6d6d4f89d7b3759c6559f
-
SSDEEP
3072:1+olElrSMF5Y4F7t/xgGGS0IC2a6XUoIuEpzyDMhglzEDjJ:1+olElr//1gD2y69Iu0zyDMu+DjJ
Malware Config
Signatures
Files
-
325e71469bbaa25dfcba0af9d6c0fa7da15c29e974ca51e9979de8017299f377.exe windows x86
ddb12ed2966096cf64e43eb5576a4aec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
GetModuleHandleW
GetStartupInfoW
lstrlenW
crtdll
__GetMainArgs
exit
raise
signal
ntdll
NtSetInformationProcess
gdi32
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
CreateSolidBrush
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
user32
LoadIconW
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
GetClientRect
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ