Static task
static1
Behavioral task
behavioral1
Sample
2874348baf9bb5f6e2843797fef97726e605836603a54dbe6dccb14df8cbcd56.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2874348baf9bb5f6e2843797fef97726e605836603a54dbe6dccb14df8cbcd56.exe
Resource
win10v2004-20220901-en
General
-
Target
2874348baf9bb5f6e2843797fef97726e605836603a54dbe6dccb14df8cbcd56
-
Size
30KB
-
MD5
0d8a7c741b0861b85596277e512e22cd
-
SHA1
cfe9e88ee8a1da8ecda8fcb671f989fe7e5d10ac
-
SHA256
2874348baf9bb5f6e2843797fef97726e605836603a54dbe6dccb14df8cbcd56
-
SHA512
75fc784f01bb6360adb229d6370a8c7714af536266bc244e3820cfc224e9efb5600242024ef64f5288f4f17c440b3c5092078f5d53f32ae35005731b3f6d0636
-
SSDEEP
768:UZGOmXe1FbvjScGtYuPvltEe7Y7Cqq/KJQqi05OTC1nehxHXuZ8/sekmf2B4YEj0:ChmXeXbeEnDQqi05Ow6xt/sekm+Bd1z
Malware Config
Signatures
Files
-
2874348baf9bb5f6e2843797fef97726e605836603a54dbe6dccb14df8cbcd56.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecode Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.khe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE