Static task
static1
Behavioral task
behavioral1
Sample
f86ba839bd0404d8c5bb314cc859c06034a0798563e99292a612c08a0c29cfe2.exe
Resource
win7-20220812-en
General
-
Target
f86ba839bd0404d8c5bb314cc859c06034a0798563e99292a612c08a0c29cfe2
-
Size
340KB
-
MD5
93394d68bb356a0e5f6a99eeed4000d7
-
SHA1
b00228891188582c692de58b282cc57cf2464081
-
SHA256
f86ba839bd0404d8c5bb314cc859c06034a0798563e99292a612c08a0c29cfe2
-
SHA512
5256b6bbef11b7901c03d93d811160bdb7f0f1aceda502638cada7002952e69a0105cc271d63ac1c681236535217aceefc40c91b343e78578ae5939a96f8c737
-
SSDEEP
6144:c5KL9R/OYrxWTdPDchAEuGOeXGcYJP+a1IGGLsd5bKNDBiS4sbjdx+T:cML9R/OnBYSpmXGcYJPN1IGGgdQfL6T
Malware Config
Signatures
Files
-
f86ba839bd0404d8c5bb314cc859c06034a0798563e99292a612c08a0c29cfe2.exe windows x86
a8f51da729af7c66fd4522158611b88b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
ExitProcess
LoadLibraryA
CloseHandle
user32
CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA
advapi32
RegCreateKeyA
RegDeleteValueA
RegEnumValueA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
Sections
.text Size: 320KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ