Static task
static1
Behavioral task
behavioral1
Sample
4906b6bb7c1b31cc6f696812c213bffab0a3473e4feebf5f3beed1b2397c1559.exe
Resource
win7-20220812-en
General
-
Target
4906b6bb7c1b31cc6f696812c213bffab0a3473e4feebf5f3beed1b2397c1559
-
Size
104KB
-
MD5
0fcef40f47b28f36354510c33df915f0
-
SHA1
55356dcb9697ee1827b9a189c1d6b11c613aedfd
-
SHA256
4906b6bb7c1b31cc6f696812c213bffab0a3473e4feebf5f3beed1b2397c1559
-
SHA512
1c8bf571d06618450491502777f632fe204cff96eb4af671813f43e8d3d3f43606ac7586067c7523434d248a58ec4e5271dad5a249c04199bee948479d817768
-
SSDEEP
1536:WCI1HI5CZ4IX4oiUIwbflEa7c9yEcTWOZ5cvs+QrsVlYbVmsnBOa5roMuG+m+C:WVo50evwrPEcfZ5xs0zOa5MMuE
Malware Config
Signatures
Files
-
4906b6bb7c1b31cc6f696812c213bffab0a3473e4feebf5f3beed1b2397c1559.exe windows x86
b286a010114de2b959785314f4d68ec3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
kernel32
FindResourceA
GetProcAddress
LoadLibraryA
InterlockedDecrement
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
DeleteCriticalSection
InterlockedIncrement
InitializeCriticalSection
lstrlenA
lstrcpynA
lstrlenW
SizeofResource
GetLastError
LoadResource
FreeLibrary
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
lstrcatA
GetStartupInfoA
user32
PostThreadMessageA
GetMessageA
CharNextA
DispatchMessageA
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
oleaut32
LoadTypeLi
VariantClear
VariantInit
VariantCopy
VarI4FromStr
RegisterTypeLi
LoadRegTypeLi
SetErrorInfo
msvcrt
__setusermatherr
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_purecall
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
malloc
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE