Static task
static1
Behavioral task
behavioral1
Sample
80144a84426e03465fe9c20c0990828590511f83024798294e80eba5d1970b14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80144a84426e03465fe9c20c0990828590511f83024798294e80eba5d1970b14.exe
Resource
win10v2004-20220901-en
General
-
Target
80144a84426e03465fe9c20c0990828590511f83024798294e80eba5d1970b14
-
Size
1.1MB
-
MD5
0df5208f2d2522384baa9878c3cbfa06
-
SHA1
6276a1f6b86cd1ca1dfe68d0aa928972a193e153
-
SHA256
80144a84426e03465fe9c20c0990828590511f83024798294e80eba5d1970b14
-
SHA512
b71adfabb1eb4e4acd482dbed40414d5dfe4f31127e7b003ee1c5ec3486fba78b9dadf6c3555b7f5c67d1e3466ee30a5096972f1c756ded6d79e35846c80b7a5
-
SSDEEP
24576:kEhaAFSTIh6yxCY16vlBJ69ZBBYV9EuEMKUvEyyTeLcGM1n:xaFTs6qCY16vJ6/BB6dPK4yOVMN
Malware Config
Signatures
Files
-
80144a84426e03465fe9c20c0990828590511f83024798294e80eba5d1970b14.exe windows x86
33a60dcd0a1210f67e95adb599c03400
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SafeArrayGetUBound
advapi32
RegOpenKeyExA
user32
PostQuitMessage
kernel32
GetVersion
GetVersionExA
EnumResourceNamesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
CreateCompatibleDC
version
GetFileVersionInfoA
comctl32
ImageList_Create
Sections
.text Size: - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 19KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata0 Size: - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ