Static task
static1
Behavioral task
behavioral1
Sample
0f4fa0bf7085d37064c96384f25574b0ba2a30e4a65d231b3c2190781909e709.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f4fa0bf7085d37064c96384f25574b0ba2a30e4a65d231b3c2190781909e709.exe
Resource
win10v2004-20220812-en
General
-
Target
0f4fa0bf7085d37064c96384f25574b0ba2a30e4a65d231b3c2190781909e709
-
Size
396KB
-
MD5
4887be259186e7d78184ceb48e1803b4
-
SHA1
aef5cf3e5d6604063a123f09d91eeaa9ff5133a2
-
SHA256
0f4fa0bf7085d37064c96384f25574b0ba2a30e4a65d231b3c2190781909e709
-
SHA512
092f5495d890ac9dd20a90819a8af757b4eb4bbcb3ab8a2da26e642141f45beb46c7b32efb518e9db83b12e55d298b5623e93a7feb6580d68c99556a6af6eb28
-
SSDEEP
6144:VTXtuZ8kK4DK0ZPQyupd8uGB/T3ew1UATuOOcsudwJk9K4uXvh3YGa5z0T:U8kLTZPQyuXGhT3ewFunPucWruVYG80T
Malware Config
Signatures
Files
-
0f4fa0bf7085d37064c96384f25574b0ba2a30e4a65d231b3c2190781909e709.exe windows x86
f16826f496598a5eee2a8fcebf5d8fa8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
LCMapStringA
CloseHandle
LoadLibraryA
ExitProcess
user32
CloseWindow
SetWindowLongA
CreateWindowExA
CharLowerBuffA
wsprintfA
advapi32
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegDeleteValueA
Sections
.text Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ