Static task
static1
Behavioral task
behavioral1
Sample
79feed1375c134cf16eb870f0988f690e84ab0cb6cfeae1d38bc877783d6c9b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79feed1375c134cf16eb870f0988f690e84ab0cb6cfeae1d38bc877783d6c9b2.exe
Resource
win10v2004-20220901-en
General
-
Target
79feed1375c134cf16eb870f0988f690e84ab0cb6cfeae1d38bc877783d6c9b2
-
Size
304KB
-
MD5
3b382a06fa948f0769d681baebabdff0
-
SHA1
1e9f843e9962cd601e6a050fda3fbd5073a537a7
-
SHA256
79feed1375c134cf16eb870f0988f690e84ab0cb6cfeae1d38bc877783d6c9b2
-
SHA512
21b28586bd620900b7d8b77ec0c07e2a1b3f183720ac66e4a9f16dca820ede03082238d3c751d155c59032618372101ccce8afc36303eabed0d10f86525a7c76
-
SSDEEP
6144:tkLoPtlCuZh2jQ7jLSd60iNKDX5g+ry42B7gIksWinJWQ:tkLKj2USxiNKlvYRLksWGJN
Malware Config
Signatures
Files
-
79feed1375c134cf16eb870f0988f690e84ab0cb6cfeae1d38bc877783d6c9b2.exe windows x86
29d9ca0bf2e7eb425450527a0d3a38f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
Sleep
GetConsoleTitleA
CloseHandle
GetFileSize
CreateFileA
GlobalFree
TlsGetValue
DeleteFileA
WriteConsoleW
GetTickCount
RemoveDirectoryA
GetCalendarInfoA
GetModuleHandleA
GetCommandLineW
lstrlenW
GetEnvironmentStringsW
VirtualProtectEx
GetStartupInfoA
CancelIo
CancelIo
GetModuleFileNameA
EnterCriticalSection
CreateDirectoryW
GetConsoleTitleA
user32
GetSysColor
wsprintfA
GetWindowLongA
DestroyMenu
DispatchMessageA
CreateIcon
PeekMessageA
IsWindowVisible
GetClassInfoA
IsWindow
GetWindowLongA
MessageBoxA
IsWindowEnabled
console
CPlApplet
CPlApplet
CPlApplet
CPlApplet
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE