Static task
static1
Behavioral task
behavioral1
Sample
57a65e20ef87ec25995460cd75d582c063344adca8686e017c96475dfc9e0150.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57a65e20ef87ec25995460cd75d582c063344adca8686e017c96475dfc9e0150.exe
Resource
win10v2004-20220901-en
General
-
Target
57a65e20ef87ec25995460cd75d582c063344adca8686e017c96475dfc9e0150
-
Size
141KB
-
MD5
0d48573fc76fb395558f9ec0e0a47400
-
SHA1
08974342710c4e6d44f8f3b37e53cbcba0bda7c6
-
SHA256
57a65e20ef87ec25995460cd75d582c063344adca8686e017c96475dfc9e0150
-
SHA512
36f70c5bfa7080d1b14f65b61a41fc20cbfed99e3792e39b0b77ea44bd08f972bae7deb41babd021c84c91e2a6a1dc286fdf1b10889d7d64062d2aa1e2177690
-
SSDEEP
3072:y7HI1EhwtqRbL2ws+krtztcH15KOPuqmVFk4pGj:y7HI1E2ybi9r8XKBqsFk4Aj
Malware Config
Signatures
Files
-
57a65e20ef87ec25995460cd75d582c063344adca8686e017c96475dfc9e0150.exe windows x86
13e805eaf04b241dc6563d480404e1a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
LoadLibraryExW
lstrlenA
CreateFileW
GetCurrentThreadId
FindResourceW
PulseEvent
HeapCreate
GlobalUnlock
GetCurrentDirectoryA
LocalFree
SetLastError
Sleep
FindClose
GetModuleHandleA
CreateProcessA
GetCommandLineA
lstrcpyA
UnmapViewOfFile
GetComputerNameA
user32
FillRect
GetDlgItem
DispatchMessageA
CheckRadioButton
CallWindowProcA
CreateWindowExA
CreateIcon
DrawEdge
GetCaretPos
IsWindow
DrawMenuBar
GetDC
SetFocus
rsaenh
CPDeriveKey
CPGenKey
CPSignHash
CPDecrypt
CPHashData
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vqxwamh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE