Static task
static1
Behavioral task
behavioral1
Sample
d7f8de640376e1b5d6100f8fa3331b5f60fdfed05c20be3485977eb5677df48b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7f8de640376e1b5d6100f8fa3331b5f60fdfed05c20be3485977eb5677df48b.exe
Resource
win10v2004-20220812-en
General
-
Target
d7f8de640376e1b5d6100f8fa3331b5f60fdfed05c20be3485977eb5677df48b
-
Size
113KB
-
MD5
82622ebc0b545de6ae330b48591646b6
-
SHA1
74544ab4dd28f235803372fd04bffda96e309600
-
SHA256
d7f8de640376e1b5d6100f8fa3331b5f60fdfed05c20be3485977eb5677df48b
-
SHA512
bf20350934f2f882238425e8ba2df3e367c7824ed3a15d81f3d3182879cb66335d6a383073e7f7565e84c1882cb7176355da8055bbf4e4408776fe25671d28f4
-
SSDEEP
1536:K+EN60HAJ8pgzvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvO:KZN6sqf9qUBjckm4rgC9BF
Malware Config
Signatures
Files
-
d7f8de640376e1b5d6100f8fa3331b5f60fdfed05c20be3485977eb5677df48b.exe windows x86
5bd5b34fc9ae4ec498944f274e4be389
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
GetExitCodeProcess
ReleaseMutex
lstrcpyA
CloseHandle
lstrlenW
HeapCreate
LoadLibraryExA
SetLastError
GetCurrentThreadId
TlsGetValue
GetProcessHeap
GetStdHandle
UnmapViewOfFile
CreateFileW
GetEnvironmentVariableA
GetModuleHandleA
FindResourceW
GlobalUnlock
GlobalFree
user32
IsWindow
DispatchMessageA
GetDC
GetDlgItem
SetFocus
DrawEdge
CheckRadioButton
CreateWindowExA
CallWindowProcA
DrawMenuBar
FillRect
CreateMenu
GetCaretPos
rsaenh
CPGenKey
CPDeriveKey
CPSignHash
CPDecrypt
CPHashData
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
knglvcp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE