Static task
static1
Behavioral task
behavioral1
Sample
618a7af3f1396b6f439616523d61e24d986069cf29becddc5a2a98224489f2ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
618a7af3f1396b6f439616523d61e24d986069cf29becddc5a2a98224489f2ac.exe
Resource
win10v2004-20220901-en
General
-
Target
618a7af3f1396b6f439616523d61e24d986069cf29becddc5a2a98224489f2ac
-
Size
4.4MB
-
MD5
a76179fc071c2422fcc988c925832687
-
SHA1
83a447dd023d07d6e2353d560d751b7d7abbcee5
-
SHA256
618a7af3f1396b6f439616523d61e24d986069cf29becddc5a2a98224489f2ac
-
SHA512
21654b805995487ee1e81e72bc8d428714135e9cb4f73270317f509dede2a382f51e4e659a79efa88a2019487f71936dab7e037b8e7420100f9081c1fd98455c
-
SSDEEP
98304:Hkwf/fMNIrQAF+9b+4z0slBOk/RhsrmMLtlStnepQK0E0vjaINyHmcjxUZzt1q5:HdNEAa/YsCk/E3JwhepQv5v+INLcjya
Malware Config
Signatures
Files
-
618a7af3f1396b6f439616523d61e24d986069cf29becddc5a2a98224489f2ac.exe windows x86
14480d530fd98f72cf155138c90e91f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
RtlUnwind
CreateFileA
HeapDestroy
LCMapStringA
user32
CloseWindow
CharLowerBuffA
wsprintfA
SetWindowLongA
advapi32
RegCreateKeyA
RegOpenKeyA
RegEnumValueA
RegEnumKeyA
ole32
CoUninitialize
CoCreateInstance
CoCreateInstanceEx
CoInitialize
Sections
.text Size: 439KB - Virtual size: 867KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 53KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 67KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE