Static task
static1
Behavioral task
behavioral1
Sample
42c191669103e589f89a69de8046299428d9d97e14ad0dcd5f3672e67e9366f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42c191669103e589f89a69de8046299428d9d97e14ad0dcd5f3672e67e9366f5.exe
Resource
win10v2004-20220812-en
General
-
Target
42c191669103e589f89a69de8046299428d9d97e14ad0dcd5f3672e67e9366f5
-
Size
71KB
-
MD5
a30fc5bee6c4048c062e9ab7c22a0446
-
SHA1
5600cc42d9230af9c9bd0258c361341c6aa42800
-
SHA256
42c191669103e589f89a69de8046299428d9d97e14ad0dcd5f3672e67e9366f5
-
SHA512
7e64e133d1cca9dc799e68026cb421ca27b2242410749a281090f7e9ce480dc3559f05fe7a10485147d9744b3cbbe8173cb07ee938712591b37469963b57b89b
-
SSDEEP
768:kbROXNGmq3xizfyMzUzjB0LMvh1YJnZhbChRsZNXAPQ0CtpjgCRi3HNw:kbQdPukfg5aB6hRsZNPwjG
Malware Config
Signatures
Files
-
42c191669103e589f89a69de8046299428d9d97e14ad0dcd5f3672e67e9366f5.exe windows x86
3ec6d7a201f6b9683dd1283f9a378e7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CompareFileTime
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetSystemTime
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LocalAlloc
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
user32
IsWindow
RegisterShellHookWindow
ole32
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoUninitialize
SetErrorInfo
oleaut32
LoadRegTypeLib
LoadTypeLib
RegisterTypeLib
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
wininet
CommitUrlCacheEntryW
CreateUrlCacheEntryW
HttpOpenRequestA
InternetOpenUrlW
SetUrlCacheEntryInfoW
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ