Static task
static1
Behavioral task
behavioral1
Sample
1a6dbdd8585efde88c38dd88fbc94d7c5eeae36ec66c273b7cb731b2b5ef4935.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1a6dbdd8585efde88c38dd88fbc94d7c5eeae36ec66c273b7cb731b2b5ef4935.exe
Resource
win10v2004-20220901-en
General
-
Target
1a6dbdd8585efde88c38dd88fbc94d7c5eeae36ec66c273b7cb731b2b5ef4935
-
Size
265KB
-
MD5
2c18f84b05a1c40041ff9c78d033c0b0
-
SHA1
7145ad1576e22647aa3f51434521e5c0fb92f3c7
-
SHA256
1a6dbdd8585efde88c38dd88fbc94d7c5eeae36ec66c273b7cb731b2b5ef4935
-
SHA512
a595c8b1deeb5c2b0b539d8e65bfa076d59dbd1adb224cd045640560dd039afa37e94146f58530991e6a5d4b167339b16a50f902e2ca62308f7e39ec0a20b89a
-
SSDEEP
6144:xL1uJLZ506LFuyFFCERRO/2PlWovLL48ho:xL1uJAo5FFCE3GvC8go
Malware Config
Signatures
Files
-
1a6dbdd8585efde88c38dd88fbc94d7c5eeae36ec66c273b7cb731b2b5ef4935.exe windows x86
e17e14be9d4d2d0c673fc2fea4ae2b5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryInfoKeyA
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegLoadKeyA
RegQueryValueW
kernel32
GetCommandLineA
OpenFileMappingA
GetFileType
ExitProcess
FreeResource
HeapFree
GetPriorityClass
CreateDirectoryA
lstrcatA
DeleteFileW
GetStdHandle
lstrcmpA
lstrlenA
ExitThread
GetLocalTime
FlushFileBuffers
ReadFile
CompareStringA
FindClose
CopyFileA
GlobalFree
OpenFile
FormatMessageA
user32
DialogBoxParamW
AlignRects
GetScrollPos
IsMenu
AppendMenuA
DrawIcon
CopyImage
BeginPaint
Sections
.d25f Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.b3a1h Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ggb4 Size: 226KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cgd9 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ