Static task
static1
Behavioral task
behavioral1
Sample
2fad50ccf45742ad933e5d22e5233f3aa36958e13ce8c1ff8db0abd936f77f2e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2fad50ccf45742ad933e5d22e5233f3aa36958e13ce8c1ff8db0abd936f77f2e.exe
Resource
win10v2004-20220901-en
General
-
Target
2fad50ccf45742ad933e5d22e5233f3aa36958e13ce8c1ff8db0abd936f77f2e
-
Size
15KB
-
MD5
79906302eff667e1e55a01215ead93b0
-
SHA1
bed1edd012654b98cba8850d8def3ce1a6030719
-
SHA256
2fad50ccf45742ad933e5d22e5233f3aa36958e13ce8c1ff8db0abd936f77f2e
-
SHA512
38bb992caeb6a0a9855b1c9d648073b4e03dcfe7da109c1ddb059ed76e4ea169ef4583fd47ed5a0fde674fa4b466c754e05ba471d2e63cd8ed51d308c1939b47
-
SSDEEP
384:MC/yxiohcIk3cQGg3Uc3V3OoHU1K1GV9:pybCx3cQjB3OoHs
Malware Config
Signatures
Files
-
2fad50ccf45742ad933e5d22e5233f3aa36958e13ce8c1ff8db0abd936f77f2e.exe windows x86
592ab34dd1f7dae4f7379ba749c2efe1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsChild
SystemParametersInfoA
InflateRect
kernel32
GetModuleHandleA
WaitForSingleObject
SetStdHandle
SetCurrentDirectoryA
CompareStringW
GetVersionExW
VirtualProtect
GetACP
CreateThread
GlobalMemoryStatus
LCMapStringW
ExitProcess
SetLastError
LoadLibraryA
WaitForMultipleObjects
InitializeCriticalSection
DeleteCriticalSection
GetOEMCP
GetProcAddress
CreateFileA
SetConsoleCP
GetCurrentProcessId
GetStartupInfoA
GetCurrentThread
CloseHandle
HeapAlloc
EnterCriticalSection
TerminateProcess
LocalAlloc
GetDriveTypeW
ole32
CoRegisterMallocSpy
CoTaskMemFree
advapi32
InitializeSecurityDescriptor
RegCloseKey
RegQueryInfoKeyW
msvcrt
memset
_CxxThrowException
_controlfp
wcstoul
_amsg_exit
gdi32
CreateSolidBrush
lz32
LZCopy
LZClose
LZRead
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ