Static task
static1
Behavioral task
behavioral1
Sample
6436b527daea8289973af784dfeacac368d1b5fdf900d2899faf33aa38f0308b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6436b527daea8289973af784dfeacac368d1b5fdf900d2899faf33aa38f0308b.exe
Resource
win10v2004-20220901-en
General
-
Target
6436b527daea8289973af784dfeacac368d1b5fdf900d2899faf33aa38f0308b
-
Size
18KB
-
MD5
0f286c4d77072c020b35f7aecba854a0
-
SHA1
9a17f9d390f73c79042a67a9b8e6e5f61880bad0
-
SHA256
6436b527daea8289973af784dfeacac368d1b5fdf900d2899faf33aa38f0308b
-
SHA512
5edd0321c047ca7f5eec6f6ff4cc6a9b28d08d00da44a8b011f6dbe812c981a1639849a4c974dfdbd71ebec3a9e2a1ee3746f87b1b05ef0e0ec966c924a9f11e
-
SSDEEP
192:cDTg+R/Da8hMC+K+JfidfMuhhMfGsMwLQQkJ5Mo7GKSQjqPL+1C8MmjAy5F:c9RuZoUOhMfwr5MOjSyC8M4AEF
Malware Config
Signatures
Files
-
6436b527daea8289973af784dfeacac368d1b5fdf900d2899faf33aa38f0308b.exe windows x86
3bf52cce958af28c47ecfbb6d0a01caa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextW
SetCapture
GetActiveWindow
IsChild
SendMessageA
MessageBoxA
TrackPopupMenu
CreateWindowExA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
ShowWindow
FlashWindowEx
GetKeyState
TranslateAcceleratorA
RegisterClassA
DefWindowProcA
GetDlgItemTextA
kernel32
GetProcessHeap
GetModuleHandleA
CloseHandle
GetVersionExA
ExitProcess
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ