Static task
static1
Behavioral task
behavioral1
Sample
74f3f567d810145290e54f4552188f96738e4fcb2b6ad78ddc1700a168ce3d6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74f3f567d810145290e54f4552188f96738e4fcb2b6ad78ddc1700a168ce3d6c.exe
Resource
win10v2004-20220812-en
General
-
Target
74f3f567d810145290e54f4552188f96738e4fcb2b6ad78ddc1700a168ce3d6c
-
Size
75KB
-
MD5
05417e47885164fc7efa5e878aebc490
-
SHA1
6bb0a592a45d8020ffac2504bf2f0924beb797dc
-
SHA256
74f3f567d810145290e54f4552188f96738e4fcb2b6ad78ddc1700a168ce3d6c
-
SHA512
700905f7d53c2fa88ed33bc1461e9710610cbcbafc63ead18761ad21c716dd08783c67ebf93144909a01d996fb4a6ad1a7e67666b209ba4bffbbf0b856d9b3c6
-
SSDEEP
1536:aMhqPCoAcxHbCi1Rf/MM3tmR9mSgNs2rll7QcAiOv09rrCP:ay4CoAaDSgNs2hlMv09f+
Malware Config
Signatures
Files
-
74f3f567d810145290e54f4552188f96738e4fcb2b6ad78ddc1700a168ce3d6c.exe windows x86
22d3476a93f81fac3c39bf88d6aef2ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
DeleteFileA
lstrcatA
lstrcpyA
ExitProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
VirtualAlloc
HeapAlloc
LoadLibraryA
SetFilePointer
CreateFileA
ReadFile
GetStartupInfoA
GetCommandLineA
GetVersion
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
HeapDestroy
GetACP
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
HeapFree
VirtualFree
RtlUnwind
WriteFile
GetLastError
oleaut32
SysFreeString
ole32
CoUninitialize
CoInitialize
CoCreateInstance
user32
EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA
comctl32
ord17
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vphtklr Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE