Static task
static1
Behavioral task
behavioral1
Sample
29e38b18e4c91bb42a82f0be06366756d0aece478abf6d9d02d6381f062388e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29e38b18e4c91bb42a82f0be06366756d0aece478abf6d9d02d6381f062388e7.exe
Resource
win10v2004-20220812-en
General
-
Target
29e38b18e4c91bb42a82f0be06366756d0aece478abf6d9d02d6381f062388e7
-
Size
112KB
-
MD5
9022ff0b57e8c0fcf509e3cf27f81cd1
-
SHA1
a4a2accfb539d46f452e6cc3b700118fb26ffa16
-
SHA256
29e38b18e4c91bb42a82f0be06366756d0aece478abf6d9d02d6381f062388e7
-
SHA512
ec7c3147ce954de5e5fe9460d2a8848a54d8dc1750835cf6b655e95a25c1515149e32f00f843cc2e59e93e589f9ebd49fb622e70474b4670837933b38fd4923c
-
SSDEEP
1536:xGD8BmwqT6aYMF5SsA+QL7+eFohUGkWki85NNfWSYsKcf4ZrIJFUa:xLqTTYMF5SsAXn+eFoCfWkIcfMriFU
Malware Config
Signatures
Files
-
29e38b18e4c91bb42a82f0be06366756d0aece478abf6d9d02d6381f062388e7.exe windows x86
bf8ebf71a15834e861a73fd863bcaa84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
lstrlenW
Sleep
ExitProcess
user32
GetMessagePos
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lfpsish Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE