Static task
static1
Behavioral task
behavioral1
Sample
20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6.exe
Resource
win10v2004-20220812-en
General
-
Target
20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6
-
Size
646KB
-
MD5
96cae2d3ae2e92a2bdfc73b1cfd03979
-
SHA1
c1964de6cd5f0d46da25c07c7db83700417277cd
-
SHA256
20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6
-
SHA512
3a3d0a3802b2165dd536bb27dbbcd30a316cf1b454c8b4cc0b376e984cf7dc1985b03d19b8c1915b2196d928f04a96353a3a454c0a439fa19bc21a374c1bab95
-
SSDEEP
12288:EfUhkhVED0dFBIea71NFmKY1eflPjA2mCO/FIavvzV9ZQzb:E8h9DgIeiEK7RjAb/z7V3Qzb
Malware Config
Signatures
Files
-
20afe13f25008fa5cc96d4d43eb3eedebf87f1f5cde3634c4162add381201dc6.exe windows x86
7dab87af94766ffa9a00df7e9b160d5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalLock
VirtualProtect
GetUserDefaultLangID
GetModuleHandleA
GetConsoleDisplayMode
GetConsoleCP
GlobalSize
HeapReAlloc
GetVersion
HeapCreate
ResumeThread
SetLastError
GetACP
InterlockedExchange
lstrlenA
LoadLibraryExA
GetCommandLineA
GetSystemTime
WaitForSingleObject
GetAtomNameA
WaitForSingleObject
user32
DragDetect
FrameRect
GetTitleBarInfo
FillRect
ShowWindow
BeginPaint
GetFocus
GetWindow
ReleaseDC
EndPaint
GetCursorPos
SetForegroundWindow
GetDC
CreateIcon
GetParent
wsprintfA
GetClassNameA
DrawTextA
AnyPopup
ntshrui
SetFolderPermissionsForSharing
DllGetClassObject
GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
DllCanUnloadNow
msacm32
acmFilterEnumA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ