Static task
static1
Behavioral task
behavioral1
Sample
1ef1feb9c0bba2a18d09ccb05cc1ab33845fd76f149e03003bba29025d869c29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ef1feb9c0bba2a18d09ccb05cc1ab33845fd76f149e03003bba29025d869c29.exe
Resource
win10v2004-20220901-en
General
-
Target
1ef1feb9c0bba2a18d09ccb05cc1ab33845fd76f149e03003bba29025d869c29
-
Size
221KB
-
MD5
32f9f6b427f0f4c835b981afeccf4dca
-
SHA1
922cf51dbe7d07b5cedcaf7de37b5d62596df9cc
-
SHA256
1ef1feb9c0bba2a18d09ccb05cc1ab33845fd76f149e03003bba29025d869c29
-
SHA512
244f9f2ccca128df70e06dc06344d33dfb8dabad6e1bafea54c6ace9e795348d99253a16ed76e138c139d5d582089437a425c3b66848d544e5ee57ec3a7256f6
-
SSDEEP
3072:jQFXWoTEacUOHMRrNeNpSMlJDfZpR9PqLaIXV:EFfncUOH82AEh9PqH
Malware Config
Signatures
Files
-
1ef1feb9c0bba2a18d09ccb05cc1ab33845fd76f149e03003bba29025d869c29.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ