Static task
static1
Behavioral task
behavioral1
Sample
0f76b6d25f2415cf29b1d6e840c420618ef762130082af132a74ae225a02181a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f76b6d25f2415cf29b1d6e840c420618ef762130082af132a74ae225a02181a.exe
Resource
win10v2004-20220812-en
General
-
Target
0f76b6d25f2415cf29b1d6e840c420618ef762130082af132a74ae225a02181a
-
Size
121KB
-
MD5
93319d2171d886ba09e4ef87b15b2520
-
SHA1
807ddcd1302ec8c1616beda41ed76322c48e0e2b
-
SHA256
0f76b6d25f2415cf29b1d6e840c420618ef762130082af132a74ae225a02181a
-
SHA512
204220c52bbfdf56b1daa696d448197280eeee702f00c4d504e8cb5acb33dc9a6d5e83e5b1cc03f1942af280cb16aa8df7da6a1378be9a112dfe76202a545655
-
SSDEEP
3072:kXzXZCT8kCUt3HbQk8kugrSY60XZWqOqSnJ5DOVAtArioD:h3bV8kug2Y60mTJ5D2zrPD
Malware Config
Signatures
Files
-
0f76b6d25f2415cf29b1d6e840c420618ef762130082af132a74ae225a02181a.exe windows x86
35d01db253505f1ddd5ec457558a058a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FormatMessageW
IsBadWritePtr
LeaveCriticalSection
SetFileTime
SetFileTime
HeapCreate
GetLocalTime
CloseHandle
GetFileSize
ReadFile
lstrcatA
GetModuleHandleA
GetLastError
InitializeCriticalSection
FindResourceA
GetModuleHandleW
SetFileTime
GetStartupInfoW
SetFileAttributesW
CreateMutexW
lstrcpyA
msi
MsiDatabaseCommit
MsiAdvertiseProductW
MsiConfigureFeatureA
MsiCollectUserInfoA
user32
PostMessageW
IsWindow
DispatchMessageA
GetWindowRect
SetCursorPos
wsprintfW
GetWindowLongW
GetWindowTextA
IsDialogMessageA
PeekMessageW
LoadCursorW
SetFocus
IsZoomed
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE