Static task
static1
Behavioral task
behavioral1
Sample
c429367b49e76c7571068762a160d38f9202d987fc28baee438bc10bf8e8aee6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c429367b49e76c7571068762a160d38f9202d987fc28baee438bc10bf8e8aee6.exe
Resource
win10v2004-20220812-en
General
-
Target
c429367b49e76c7571068762a160d38f9202d987fc28baee438bc10bf8e8aee6
-
Size
312KB
-
MD5
02fa733ce08a0b6db949c4a37d946429
-
SHA1
220bf7db14b6422b35d4470eee8db535acec89e7
-
SHA256
c429367b49e76c7571068762a160d38f9202d987fc28baee438bc10bf8e8aee6
-
SHA512
da71d4fed2be012c96f04be28f79c7b6da80b29e4ac467c36adb857324aa977c156c63833fd1cfb8f055300abb05edda2e817482fc2f5ad4e4d6df095ed80b58
-
SSDEEP
6144:cIvrk84y5eVWjNwLLuI3Ejncqwr7q5xS/HH4neYNXcSkkHI1veDDws+:vvIFyogFIPJvH4nHXdkmWveDDw
Malware Config
Signatures
Files
-
c429367b49e76c7571068762a160d38f9202d987fc28baee438bc10bf8e8aee6.exe windows x86
08dd35fc44c2f4c312dc085a2d0dc461
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegQueryValueExW
comctl32
InitializeFlatSB
gdi32
UnrealizeObject
msimg32
AlphaBlend
ole32
OleUninitialize
oleaut32
SafeArrayPtrOfIndex
shell32
Shell_NotifyIconW
user32
CreateWindowExW
version
VerQueryValueW
winmm
PlaySoundW
Sections
.text Size: 286KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE