Static task
static1
Behavioral task
behavioral1
Sample
1e671bbecbcbe507cd0d0a51f5522592fe10bfa401aa6f92a32e51110d6315be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e671bbecbcbe507cd0d0a51f5522592fe10bfa401aa6f92a32e51110d6315be.exe
Resource
win10v2004-20220812-en
General
-
Target
1e671bbecbcbe507cd0d0a51f5522592fe10bfa401aa6f92a32e51110d6315be
-
Size
167KB
-
MD5
3c361e7c0c0286b4fd920b492e72a6c0
-
SHA1
bdaf6f58972b2263944c1bb9d4531d989b8ec9da
-
SHA256
1e671bbecbcbe507cd0d0a51f5522592fe10bfa401aa6f92a32e51110d6315be
-
SHA512
8cd9cb9b07c2751315e9d85b25181f427def0f2c95e451e8a9acd632e80ff890683ca34cd4e01bfc48ae0490d1d4a7bd5da3b2f2e0fcc899bacc28b60f511ed4
-
SSDEEP
3072:mS3n/mXNoi6bIiaWVyzPdEuEN9Cgkyhh26UI0zpG6oKhLrR:/noNoFboeybdYNhJ32lG6o63R
Malware Config
Signatures
Files
-
1e671bbecbcbe507cd0d0a51f5522592fe10bfa401aa6f92a32e51110d6315be.exe windows x86
c6b5437954af45a4a080535d553509e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringA
user32
CreateWindowExW
DdeCreateDataHandle
DdeCreateStringHandleW
DdeDisconnect
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeInitializeW
DdeNameService
DdeUninitialize
DispatchMessageW
DrawTextW
GetCursorPos
GetMessageW
LoadIconW
LoadStringW
PostMessageW
RegisterClipboardFormatW
SendMessageW
TranslateMessage
wsprintfW
DdePostAdvise
kernel32
CloseHandle
DeleteFileA
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemDirectoryA
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
LoadLibraryA
LoadLibraryW
LocalFree
VirtualProtect
lstrcpyW
lstrlenW
FreeLibrary
advapi32
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
gdi32
CreateCompatibleDC
Sections
AUTO Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 154B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ